{"report_id":"60a55c16-2b44-496b-885f-2ca7c569e969","version":0,"status":"done","tags":[],"date":"2026-09-24T18:18:19Z","url":{"schema":"http","addr":"steamunderground.net/","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"steamunderground.net/","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"title":"SteamUnderground - Pre-installed Pc Games","dom":{"size":344693,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45603)","md5":"b7246e0d7f03b1a5abe89ce7cf20caaf","sha1":"d7d8dd7a2a17e89a241f9df957ef1d4f16dd220c","sha256":"5429db989d5429fe0490345c01e1de503c67c38de685f473367028a87028aa68","sha512":"1944a6ae78316ab3974fbe64ee41844aa7f38726f8d5bc1a681955fa0c2b4424da3efabdc8de0a6edaa10437ddc455bc611f843df1d0d34adf9d25f1b0398854","ssdeep":"6144:WSFEi3okBgK12978iNac5xKoN9+WbDCwa2nk1T+oVV8:W6Ei3okBgK12978iNac5xKoN9zbDCwak","tlshash":"d574e8b61454203ef36783a9a195be1d77d28107d7074ee4b3ec6ae8cbc2dd658a7308","dom_hash":"domhash6c4ccd95e5280efccf060fae41e1cacf","first_seen":"2026-09-24T17:43:15.644107Z","last_seen":"2026-09-24T18:18:34.700253Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"steamunderground.net/","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-29T18:18:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-09-24","alert":"Detects hex encoded code that has been base64 encoded","trigger":"steamunderground.net/","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2019-04-29","description":"Detects hex encoded code that has been base64 encoded","reference":"https://www.nextron-systems.com/2019/04/29/spotlight-threat-hunting-yara-rule-example/","rule":"SUSP_Base64_Encoded_Hex_Encoded_Code","score":"65"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"steamunderground.net","ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-02","domain_rank":1645925,"first_seen":"2024-08-10T22:43:13Z","last_seen":"2026-09-21T20:46:39.840998Z","alert_count":25,"request_count":24,"received_data":3241425,"sent_data":13673,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Redis Object Cache","description":"","website":"https://wprediscache.com","common_platform_enumeration":"","icon":"RedisObjectCache.svg","categories":["Caching"]},{"name":"Redis","description":"Redis is an in-memory data structure project implementing a distributed, in-memory key–value database with optional durability. Redis supports different kinds of abstract data structures, such as strings, lists, maps, sets, sorted sets, HyperLogLogs, bitmaps, streams, and spatial indexes.","website":"https://redis.io","common_platform_enumeration":"cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*","icon":"Redis.svg","categories":["Databases"]},{"name":"Redux Framework:4.5.15","description":"Redux Framework is a modular PHP library that allows developers to create customisable settings panels and controls for WordPress projects, providing a consistent user interface for managing options and settings.","website":"https://redux.io","common_platform_enumeration":"","icon":"Redux Framework.svg","categories":["WordPress plugins"]},{"name":"Site Kit:1.188.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Yoast SEO:28.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-20T22:44:48.5379Z","alert_count":0,"request_count":2,"received_data":1050798,"sent_data":966,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":4,"received_data":139020,"sent_data":2339,"comment":"","tags":null,"fingerprints":null},{"fqdn":"steamdl.net","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-01-23","domain_rank":4566818,"first_seen":"2024-01-23T14:44:53Z","last_seen":"2026-09-21T20:46:40.321262Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":579,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"steamunderground.net/","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce71388c2d441cfb9ef0985bc4e5bb71","sha1":"1e74c490ed76f671eb45ab0b45c9c9f5b9b89f0f","sha256":"efb5a648656ae8f944fbf74e5644126464160ab50197a288c8b587e74edd575a","sha512":"8ccd39ea8643980590cf71014ceee6bb774de11bc87aa162d3b1e48b0f6c392399186fabf147e0cbe9990950cf75e5517d78a357b01e6afbdb00472909db3a1d","ssdeep":"","tlshash":"89f0bef14158513f2ae2190a5412b2a63d7300baf3067080d46d9c605274ba9862afaa","size":476,"data":"","first_seen":"2023-03-07T01:02:50Z","last_seen":"2026-09-24T21:39:25.219289Z","times_seen":48794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"877d7d8ed54350548dfe42ad56479dad","sha1":"833d73fe9c67978716b86dd085c80de501564ea9","sha256":"9fc646a68913dff2f78e7ac2514da8d288a8aec51e368b9dc9d85d461a4988a9","sha512":"bbad9d960ca9b1788a42425a5e6f5eefd7eddf1db3be25aaa071a309719438b93ce11a0fbeee3af0ff00b5519bfed3419b2d9bf7d69bfc3896fbdb61f4295f1f","ssdeep":"384:DBoZg/90FRKMrfkaF9kps3cWevSBJXYxP/UiSBm8lHwSbM2nCp:h/9ZMrd9vcxSBJIxP/UiSB/lHwSbM2Cp","tlshash":"f562b97d333655b12aa282aa9329a351733111ff7603842c793cece3550deda3939e79","size":14553,"data":"","first_seen":"2026-02-24T02:48:22.170756Z","last_seen":"2026-09-24T19:46:56.777603Z","times_seen":3803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"709a6e996bc7eeeadd89ce194856bb38","sha1":"7bd8980ee3731621e5d7a171d8799dcaad623cba","sha256":"d373c6362c1e7269d28c68d5a41596db01bf7434b7297ba1602349bbfe2216cb","sha512":"e74f2a98fb8ca7e4296c62953ac6460b87a46dfe229651497f6f6a51eda26ceb55e4142d2cbd992c774f38f180edef9306fee3798a9830014dfbcb0715d2bf6d","ssdeep":"","tlshash":"fdc02b8c210e4c70b1e72b008b3ffb04b0023304a4d16d31880d23044d30e07e748810","size":149,"data":"","first_seen":"2026-06-28T18:35:00.37235Z","last_seen":"2026-09-24T18:18:34.728623Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"257451779fe14eea2e6c06b9ef6e773c","sha1":"7dcadd3f3d00ed8afeb3b0fa69ae3fb98363faf6","sha256":"8e89a22b59044120fb57c6cbe59dbdfe6eb8d5c30f535910f57900162010f5f7","sha512":"d13f40b54754691eb55dc037bfc4492a5faa0648c64938499500ebb6a906e8f00f731a09ebc068d1d5cd5d92a6443c647e0de459b2e8cb93706093a328b9587a","ssdeep":"","tlshash":"4ac09b8c211a5cb195e73b409f7ff605f4453218b4d56d324d5963485d60e17d758854","size":149,"data":"","first_seen":"2026-06-28T18:35:00.373213Z","last_seen":"2026-09-24T18:18:34.729223Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7dea53351c562fb37516ea608570bbc","sha1":"07f9e0f1c05ec7d8a54a18b49040d96538dcc92e","sha256":"28c32162210700ad507850bad7c8a8d54ac42c9b03bcf090b61d032dfb7aafbe","sha512":"a6dbaa25fdfecebe041b716177acf81468c7a57bae308286b2242ab6c61255de610487e83bc81bd6f012ce594c090bd805edc5d63cd42f10dcaec7d4a1b083e0","ssdeep":"","tlshash":"16f0c9b2718d0c8250224aea8f20c633ffcd8d09642aca25e24dd1cdc019e80d0cfa22","size":520,"data":"","first_seen":"2026-06-28T18:35:00.377409Z","last_seen":"2026-09-24T18:18:34.729784Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0741f18cd50648b858ecf6f51dbf2d69","sha1":"b9f8cb485f678295e40eeba8f7a9a4ebf266c5e4","sha256":"e499e62567a3b8466f6b969cf5e3b0bc385ca08057283ec7f4a29b3604ac40ec","sha512":"e69e3c67342ab7fbc1b5c234210da0f6882d43d6bea4134eb08cf24a88db03a48ebdd5de2fdbbc26e254b427293d0c62e97234249d6854203bf94b646d8a271d","ssdeep":"96:CEVWWvtg7Hf7HW7HIq7HI07HIH7HI2h7HIk7HIA7HIOz7HIQe7HIk7HIK7HIaw7w:CiFg7Hf7HW7HJ7Hx7Hk7Hdh7HH7H17Ho","tlshash":"f691df7e066484a7a3e6c396604d350beee2851b855bbdc1c5b94f9c8ec1fac31da314","size":4414,"data":"","first_seen":"2026-09-24T17:43:15.736822Z","last_seen":"2026-09-24T18:18:34.73041Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad044f3a7b1f3d2fe3bb6a00d3084867","sha1":"68c85c6ce0f49806477888a647331674bd2d33f4","sha256":"b49b851a06ad38ddab6020c3ac5d3309a486605a98f37df4bd0f714ba95747c1","sha512":"46f6382665e29be9fbd1f87cc67a63894bbf8b14e15058459f94b44670d12e1f50401f281f13113edb3407053b4f1114c0297441e2c87f13c8bd18fc4d233217","ssdeep":"","tlshash":"69f05c50e158c82365a7ac05cc78f11e95e6d215edadc0351cffdb65c61280100c474c","size":463,"data":"","first_seen":"2026-05-08T11:11:46.489711Z","last_seen":"2026-09-24T18:18:34.731036Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4987c278554aca0f434be960093da5ea","sha1":"a84e797c1bf51ba6880369c108139892b4ff222e","sha256":"0bb088a70492e66de65d971724f3e1ffc81e79d10b7baad3881f38d5e41d159e","sha512":"e09542491e372f328e06c8eeb6e5b9f06de1eadf4a76819313dfc6920e1fcb8d0642dfc89f4caadb4342488dd3b59ac09124901e8027f1e0edb72d506571d7bf","ssdeep":"","tlshash":"1131ced3326bc41ebcbb241323bf132e342079276f406463aee9c86644b9e83355769d","size":1794,"data":"","first_seen":"2023-03-07T01:29:13Z","last_seen":"2026-09-24T20:53:50.552639Z","times_seen":11425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-W7SD24P7S7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f92a96ff9054a48048cd49080642249d","sha1":"b8fb5807ff9404b1cc307e2549c63139a6f24b2f","sha256":"e198034de0f4c2b563d632e45be469d6ead5cfe3042645c73c77272133a0e50e","sha512":"c4428a7a3a7f1e7d884a033173a196f6bda97d6b4e1333ebe6273a6adff291ae5d6b95ed995e23b9ac0e9b5c71e66c82ef017eb7672725b4f7f58bd598575791","ssdeep":"6144:eB31iBQwAFAAwnQM0YrxQYS8cfmb9E0B3wXM+4OaIiOJwaYnI:nPAFAvQexF+4SiQX","tlshash":"68b4f7cd73d674229396f178903f018ba57b28a2b45cc89af289dce42e3465a5173f7c","size":524795,"data":"","first_seen":"2026-09-24T18:18:34.719853Z","last_seen":"2026-09-24T18:18:34.719853Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KGXDR9KNJX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"79d63b842259521bc80340d826912acd","sha1":"533e9b9122b4a112138f01b85c55ef56ef6ee8e2","sha256":"51372e9e1b5f0cd24282f26cb994d7c45bc4c16ef7ec9aa9540ec43d81da52f8","sha512":"0da783a84fb688b1ebddf5cbb0f87a12e7d2affd33f4fb228e8725de09f26103849be581a62b07167c8f32f27b638719fb9cf9b0b028751265a17f1b6be799fd","ssdeep":"6144:uS31iBQwAFAAwnQM0YrxQYS8cfmb9E0B3wXM+4OaIiOJwaYnI:QPAFAvQexF+4SiQX","tlshash":"f4b4f7cd73d674229396f178903f018ba57b28a2b45cc89af289dce42e3465a5173f7c","size":524795,"data":"","first_seen":"2026-09-24T18:18:34.70737Z","last_seen":"2026-09-24T18:18:34.70737Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/rocket-preload-links-js-extra","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad8c0a0c6bff6ff1b57e8e59687e07e1","sha1":"0761f6c0dfd2f21171cacff3a730e040d1a1fcc2","sha256":"6bc9ca32e67d2b1d3cf2f962882db107fff36853f33d98625f6ad415e19439e0","sha512":"b71cfca60cbba5fd2bcac24b6e22131b62531931e9a0bc8c1b7a08d0c8794d681df31054977c513dc2ba7dbef51cc95fc9fcf010fdb9a0065ab82f76e346d68c","ssdeep":"","tlshash":"92218bb2e1890c4150224afa8b60c533bbcd8d05e426c915d24dd18dc019e40d08f625","size":1372,"data":"","first_seen":"2026-09-24T17:43:15.743035Z","last_seen":"2026-09-24T18:18:34.732182Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/rubik-customjs-js-extra","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffa0a7be90957348a62988a16eb77ab8","sha1":"baf88e8a22e8f7dd4b20f62bb6d954f1f73338ba","sha256":"892994bfefa0983168a4714ef85d6f5fc6ca9925e0102f05f7749d39b650bb3a","sha512":"34ffa33a419268ba77b0ad4f553752d71a3e2c02c1b1fe210b9eb1cb3f4f15f9bc404cc13f503747cf5b072f35987c027998f033697dccdf4e50de17c13d7527","ssdeep":"","tlshash":"c2215c50e158c82365a7ac35cc78f11e95e6e215edadc0351cffdb65c61380140c474c","size":1357,"data":"","first_seen":"2026-09-24T17:43:15.747518Z","last_seen":"2026-09-24T18:18:34.732864Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb15a10a641a318f91e7e912e4f9c184","sha1":"bd41f67233facb96976ed7b8e7207d52c03d340e","sha256":"f40767552e5e94b2d5f9a65d7f640cfa7d225298023dbd682095e040809a3d1a","sha512":"49570d36e5b1ae3c3a4965f7d054258ff676326bee0d9399aa990926e9a762f699de1d09078debadc43b363ae51d740ba33f2e8c64bb223a73d3c62872ebb3d2","ssdeep":"192:pDvu5/2Pbq1Ztbat1oeeC9X8UnZ/HuuwJgbClRL/YeFG/uW1evaO3Ve:pTw/4QOx+R8puVY","tlshash":"b60233487946746b3973f0f6218f02ca353a24426ced6854a6e1f8e82d7858d1463f7d","size":8892,"data":"","first_seen":"2023-03-07T01:19:39Z","last_seen":"2026-09-24T21:12:33.909227Z","times_seen":76901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/rubik-module-load-post-js-extra","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b557ffadcc212887c4eb6baa03708d39","sha1":"2aaf81264eb10ad5c15db15bc3f1364cb74bd20f","sha256":"d9050a59546d484fd6dcb3356b9e26a43dc2832a997d579f3bcc4c078f51c706","sha512":"ce1071f687ac3249d9cc79cfcc4574d2d10a525dde95d1e9974b7389dcade0f8dbec71720e2422736fb4a7f30d0663fd653c5f7cb4380afe332292fb1c865e0c","ssdeep":"96:6EVWWvtg7Hf7HW7HIq7HI07HIH7HI2h7HIk7HIA7HIOz7HIQe7HIk7HIK7HIaw7a:6iFg7Hf7HW7HJ7Hx7Hk7Hdh7HH7H17Hy","tlshash":"11b11e7ec66484a793e6c3b6604d350aeee2851bc55bbdc0c5b94f9c8ec1fac3196314","size":5298,"data":"","first_seen":"2026-09-24T17:43:15.744624Z","last_seen":"2026-09-24T18:18:34.733524Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"steamunderground.net/wp-content/themes/rubik/css/fonts/awesome-fonts/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.524Z","timestamp":1790273865524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/themes/rubik/css/fonts/awesome-fonts/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"6a727bdc-12d68\"\r\nexpires: Sat, 26 Sep 2026 10:21:35 GMT\r\nlast-modified: Tue, 04 Aug 2026 23:55:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-powered-by: centminmod\r\nx-rocket-nginx-serving-static: BYPASS\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nage: 2447769\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2QT9TC5fCYkRZXH8341KDyD12sRBYF%2B9%2BmEEtfKkQEnQjd2mTDuDAWQJsIK%2B8X9r4pdoNFLX4SnaBKlo3zkmhgh68kxdk%2FtRU6TMo5e%2FwHB%2FUNRjQ67CZvUxYL7SyKb1hKCNJxtN%2FQ%3D%3D\"}]}\r\ncf-ray: a403c9ab9bc0d731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 77160\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77160,"size_decoded":78155,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-09-24T21:28:49.850961Z","times_seen":544128,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2026/09/The-Piper-of-Dawn-Free-Download-By-Steamunderground.net_.jpg","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.703Z","timestamp":1790273865703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/The-Piper-of-Dawn-Free-Download-By-Steamunderground.net_.jpg HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncontent-type: image/jpeg\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"6ab4bfc6-2cd74\"\r\nexpires: Sat, 24 Oct 2026 12:35:50 GMT\r\nlast-modified: Thu, 24 Sep 2026 06:14:30 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 20515\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LDCMOwAt1gZcBz%2BOQ1iQ1btdDioNtu5ObjM3o6w%2B%2F9WaIagv7XnjBEJ2HWwm9ILzQ7sMUH%2FWf61%2F7MOSiEbYDrN%2Bj%2FInXBMu5R2ajQRgomwHF38%2FY5u54MbpDdFJgtfMDcC12k0Eyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a403c9acbc2bd731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 183668\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":183668,"size_decoded":184633,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 600x900, components 3","md5":"6efef792ceab200212249ef8f73c304a","sha1":"aabaeaf17db0cd95d0eb052b3eb40780e23a1ffd","sha256":"c651cc5282d649aba6f8325a5e47c469f280c55e4a29a5338351d2c1ff9ca197","sha512":"715962181d5a14a7f4ceb51298b6da05ace2f2038caf8fb81a0f3a5b474602dba21d6802d2f33464713467e64db06093b38a0d9f86643061835ac6ff77e116b0","ssdeep":"3072:DvKr18PnmSFJK0vaE5/CQjohWD9lXiPfc2jX9oJ9NWmx8NSusPjcLRWTxlPL2fAw:TI+mmJn3CQjocD9lXIac1QPj3T7L2fAw","tlshash":"f5041358a79272dde0822758c5a75d28b4436adbae37dfc7f24c8420d1bc72c15a83ec","first_seen":"2026-09-24T17:43:15.684267Z","last_seen":"2026-09-24T18:18:34.70437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2026/09/Woodo-Free-Download-By-Steamunderground.net_.jpg","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.718Z","timestamp":1790273865718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/Woodo-Free-Download-By-Steamunderground.net_.jpg HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"6ab0d8da-2247b\"\r\nexpires: Wed, 21 Oct 2026 12:06:29 GMT\r\nlast-modified: Mon, 21 Sep 2026 07:12:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nage: 281476\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6pk8agngy4zrm4K7VQcBHgXLn%2B43cs7%2Bbk0CaNIVlAdC6qDR2hjqbo2csAS7StzhfudCi%2B6cpONjGX5daNbb0nJNa%2FvBsbNNkK%2FoETKBJeS4pvboZ0s9e84NBx4S4QUNTc3M0rlQTA%3D%3D\"}]}\r\ncf-ray: a403c9accc42d731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 140411\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140411,"size_decoded":141371,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x900, components 3","md5":"cb5a53a46a2d73b76a882af72e6371bd","sha1":"236af21cb0f6d8ed69b179c269add6269d3fd56b","sha256":"b53038c94e5e933ad44c5202ec34c5959ba77b85982d47da577ce3d52b63205b","sha512":"edddc15febcc58c24a5783c32b89fb2c94f4d191d137e1fffeb9f17661b076e7be74affd0c128f07d8c2538ef6cd1d93b2b630721cd2642758be5d0708c646b8","ssdeep":"3072:pPjJAz0qRcN7abblIvlpW0CR3OZfe+fylSbxzVzWKS:pPjJAwua7+lIvi0CREm+fCUzQ","tlshash":"42d3123b143a326bd455e66e1fb48e1cb2e28136a122d01b60fd4b5172d51ae68fe1dc","first_seen":"2026-09-24T17:43:15.661618Z","last_seen":"2026-09-24T18:18:34.705975Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2024/08/SteamUnderground-logo.png","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.818Z","timestamp":1790273865818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2024/08/SteamUnderground-logo.png HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"66adebac-19a9\"\r\nexpires: Wed, 30 Sep 2026 09:19:28 GMT\r\nlast-modified: Sat, 03 Aug 2024 08:34:52 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-powered-by: centminmod\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\npriority: u=6,i=?0\r\nage: 2105897\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=heuyl7v3yH87gbHcGbpd4CsxWPirK9Dhj96y7qpAGBh%2BXL91dsIKM6Svdrw5zHZKNsAOivCQvc9lTxuomCEUaWQs8fsYDx9W8%2BxgKjNUizYE8PFajOAJAv7DJuNDEcHDhcq65xm2oQ%3D%3D\"}]}\r\ncf-ray: a403c9ad6c98d731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6569\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6569,"size_decoded":7549,"mime_type":"image/png","magic":"PNG image data, 150 x 45, 8-bit/color RGBA, non-interlaced","md5":"bff076ba6c15de3e2c57fab2cc209a8c","sha1":"cc442c5e05691f1fc4de4230f267ccafe19e0e42","sha256":"5022d93017817a432097e147e6696c6393fed8c4fb5695e9444abe3606ae8fd0","sha512":"25de608619c80dfaa3c2a3f136ccf9ef8b1cfb8e6ca6799945c2fe33fadde8cdd9dfe8b60fc430c13348d19eb2bc8ef27b72d627805be3699482c26900a5a4f0","ssdeep":"192:QIIHUCD4waHxB8gLz3dsCJtgccuL/z5syawav:O0w2B8iZjzG0E","tlshash":"66d1af88348600a1a48207b73eb6ed0b553ebfd11355bd3c9eb6511bc212a107c733af","first_seen":"2025-03-30T06:09:21.262112Z","last_seen":"2026-09-24T18:18:34.706716Z","times_seen":21,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2024/08/SteamUnderground-logo.png","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.819Z","timestamp":1790273865819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2024/08/SteamUnderground-logo.png HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"66adebac-19a9\"\r\nexpires: Wed, 30 Sep 2026 09:19:28 GMT\r\nlast-modified: Sat, 03 Aug 2024 08:34:52 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-powered-by: centminmod\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\npriority: u=6,i=?0\r\nage: 2105897\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TScDefhl0XNDYGAZDqzESjwXJIuoYYqGIOjk2ZoWq%2BH3INHVL3m8zXaP3Jmb8in2pF60UzC%2FvYQCWnA6T99d%2FwCFHNjtouH1ZPpYkJcdDWNGXwAian7t5tWzCzHSN4vy%2BxWM3ndMYQ%3D%3D\"}]}\r\ncf-ray: a403c9ad6c99d731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6569\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":6569,"size_decoded":7553,"mime_type":"image/png","magic":"PNG image data, 150 x 45, 8-bit/color RGBA, non-interlaced","md5":"bff076ba6c15de3e2c57fab2cc209a8c","sha1":"cc442c5e05691f1fc4de4230f267ccafe19e0e42","sha256":"5022d93017817a432097e147e6696c6393fed8c4fb5695e9444abe3606ae8fd0","sha512":"25de608619c80dfaa3c2a3f136ccf9ef8b1cfb8e6ca6799945c2fe33fadde8cdd9dfe8b60fc430c13348d19eb2bc8ef27b72d627805be3699482c26900a5a4f0","ssdeep":"192:QIIHUCD4waHxB8gLz3dsCJtgccuL/z5syawav:O0w2B8iZjzG0E","tlshash":"66d1af88348600a1a48207b73eb6ed0b553ebfd11355bd3c9eb6511bc212a107c733af","first_seen":"2025-03-30T06:09:21.262112Z","last_seen":"2026-09-24T18:18:34.706716Z","times_seen":21,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KGXDR9KNJX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.498Z","timestamp":1790273865498,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"82:1C:33:18:03:EB:A2:89:36:B9:B7:0B:89:36:C6:F8:57:69:F4:1C","sha256":"29:1A:84:B5:D8:A3:49:02:4C:D7:48:7A:47:10:FF:83:DB:BC:B7:C9:20:8F:70:5B:F6:F8:93:22:AA:34:24:55"}}},"request":{"raw":"GET /gtag/js?id=G-KGXDR9KNJX HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\nexpires: Thu, 24 Sep 2026 18:17:45 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 175874\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":524795,"size_decoded":176478,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"79d63b842259521bc80340d826912acd","sha1":"533e9b9122b4a112138f01b85c55ef56ef6ee8e2","sha256":"51372e9e1b5f0cd24282f26cb994d7c45bc4c16ef7ec9aa9540ec43d81da52f8","sha512":"0da783a84fb688b1ebddf5cbb0f87a12e7d2affd33f4fb228e8725de09f26103849be581a62b07167c8f32f27b638719fb9cf9b0b028751265a17f1b6be799fd","ssdeep":"6144:uS31iBQwAFAAwnQM0YrxQYS8cfmb9E0B3wXM+4OaIiOJwaYnI:QPAFAvQexF+4SiQX","tlshash":"f4b4f7cd73d674229396f178903f018ba57b28a2b45cc89af289dce42e3465a5173f7c","first_seen":"2026-09-24T18:18:34.70737Z","last_seen":"2026-09-24T18:18:34.70737Z","times_seen":1,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":10,"connect":21,"send":0,"wait":35,"receive":80,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.501Z","timestamp":1790273865501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:08 GMT","end":"Fri, 27 Nov 2026 08:06:07 GMT"},"fingerprint":{"sha1":"2F:14:FD:BF:8F:EB:2C:CF:88:9B:CC:4A:C1:C4:E2:AB:C3:12:F6:A5","sha256":"C2:49:9C:CB:35:19:09:8C:76:23:91:B1:4E:A3:4E:FD:14:CA:CC:68:8E:83:16:7B:06:CC:FC:A2:D0:49:61:F5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://steamunderground.net/\r\nOrigin: https://steamunderground.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 24 Sep 2026 13:52:55 GMT\r\nexpires: Fri, 24 Sep 2027 13:52:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 15890\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43948,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-24T21:27:34.976289Z","times_seen":306386,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":52,"send":0,"wait":51,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2025/07/steamunderground-scaled.jpg","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.530Z","timestamp":1790273865530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/steamunderground-scaled.jpg HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"68651840-7c29c\"\r\nexpires: Sun, 27 Sep 2026 13:25:58 GMT\r\nlast-modified: Wed, 02 Jul 2025 11:30:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-powered-by: centminmod\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i\r\nage: 2350307\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dE9CmUavYz4TvHRZKCGZWhcqbtj8gLvGmdyjleaYXq%2BC2Z34hmMXYjI5yfi%2BYqqxu0ViZ7H6nPaBuYNASL1PgSA25PICsCjK7WEMV%2FPuV%2BH8sEh2AOK1VWogtkn2FA%2BJor0t1Zt95Q%3D%3D\"}]}\r\ncf-ray: a403c9ab9bc7d731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 508572\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":508572,"size_decoded":509559,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 2560x1440, components 3","md5":"84fa5d276294fe00c7c6bf5a2b1cb631","sha1":"aa27dfa39991ec5d3422f1682005d0be5cdba8d9","sha256":"e941dce4f9c07c09e72d91fc6085c38773d2372e145f7094812a9e539228ceee","sha512":"7e8f63f75979261d753e7add96d21df93c7c94697a3205fdf46c1bd3c8ae9297543c372ed96f5aff55a69f2a485ea0e77ea7b5ebe1feddff79f53d46e8f83968","ssdeep":"12288:qVDcQo7aReA6plrUV1cDc7UKiaWIWJ5SQ5/gobj:8Ho+AA+rI1wc7UL57l/gu","tlshash":"acb4238610570146d2079cbb25e3bedd3992933c2369e3535bb79b6f216234b282cf79","first_seen":"2025-07-04T14:12:58.534818Z","last_seen":"2026-09-24T18:18:34.709058Z","times_seen":19,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamdl.net/wp-content/uploads/2024/01/SteamDL-Background.jpg","fqdn":"steamdl.net","domain":"steamdl.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.532Z","timestamp":1790273865532,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2024/01/SteamDL-Background.jpg HTTP/1.1\r\nHost: steamdl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-24T21:27:34.96442Z","times_seen":18642061,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2026/09/Trails-in-the-Sky-2nd-Chapter-Free-Download-By-Steamunderground.net-3.jpg","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.697Z","timestamp":1790273865697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/Trails-in-the-Sky-2nd-Chapter-Free-Download-By-Steamunderground.net-3.jpg HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"6aab8e11-1dced\"\r\nexpires: Sun, 18 Oct 2026 00:58:38 GMT\r\nlast-modified: Thu, 17 Sep 2026 06:52:01 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i\r\nage: 580747\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bl6YYkvCOqDM23Es%2FVdhiVbCDa%2FR%2F7l44JH%2BUz0KmXD70m93WUg2t71WATs%2FuqtmDVdIE19qpn8XEaIelppRddNaSsBlEL0F%2FnEwR0HU5Jw3TYBQQfMWFJqhoDGkIH7GyTfK%2FIkf8A%3D%3D\"}]}\r\ncf-ray: a403c9acac26d731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 122093\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122093,"size_decoded":123057,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 616x353, components 3","md5":"dad4cc16019e63bc891180464764b19d","sha1":"23f047249e23b6fb74e24eab955c0a2d184ee3c1","sha256":"173d08054928a2c6073236a18879967e6bd30d5a29b195855b1d314e3926a2d8","sha512":"746e48c5a1395c7d1f7150b81f8ef2623f9d6ad62142757009be7a996414773e7269ee8edb45de309215e4ff26d65326e33368330686c22459e7409f7ed7fed3","ssdeep":"3072:2jS7G97WvJSoVNi0kSKpVy9mBLVdKmZ2LcwwsblCnjpw:2GquLNiljyEfKm4IwNCnjpw","tlshash":"a0c312511cc3a08eb8f901dbd3bdee56a44807f977f376a0a58fb826426d0c905dc96b","first_seen":"2026-09-24T17:43:15.652024Z","last_seen":"2026-09-24T18:18:34.710232Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2026/09/Lootborne-Free-Download-By-Steamunderground.net_.jpg","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.706Z","timestamp":1790273865706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/Lootborne-Free-Download-By-Steamunderground.net_.jpg HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"6ab370f6-22dda\"\r\nexpires: Fri, 23 Oct 2026 12:26:17 GMT\r\nlast-modified: Wed, 23 Sep 2026 06:25:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nage: 107488\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qK28XjAjOGWQnLjWJSfzAiS02dAcfdOiC57Jg%2FLFPdX%2Bp3rY%2BoQJkpF9CBZAnDImuxzEc4c04xeriO%2FNkYv6PggK%2F0L0%2BIVDATalhr%2B5fRx1Zqg45U4HGlFlc5q3rNVGTPV5bRpXGg%3D%3D\"}]}\r\ncf-ray: a403c9acbc31d731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 142810\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142810,"size_decoded":143774,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 600x900, components 3","md5":"63b3e64102e055b4559486485b1ac0be","sha1":"4866788f374e649d01ad4643b333124f1d164c60","sha256":"c140c520854de07dd48c8e1c9432b2300174ebd74c4e4bdad7b56a9a5cde2608","sha512":"56575a300fb8df4d84cdd19a9156960f19446a0d47819ab722b9d4f52907797d206d4c7225193b2b47dc7948e7bc36dd2151fc7469810ef0756c7dc95b73aca5","ssdeep":"3072:6QyOokEa4PxqTURZ2HKiuVvtmxf53HTmdoqa9nwWI2WaLC5RgnJ4xW:6WgJPATLKZ4pZoa9wIWaLC5qz","tlshash":"c9d3129a566e81def35f2ba4bff64718686ab0a09e4178c0247204dc397e374cb73427","first_seen":"2026-09-24T17:43:15.66015Z","last_seen":"2026-09-24T18:18:34.710858Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2026/09/Dressmaker-Free-Download-By-Steamundergrond.net_.jpg","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.710Z","timestamp":1790273865710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/Dressmaker-Free-Download-By-Steamundergrond.net_.jpg HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"6ab21d26-27c0b\"\r\nexpires: Thu, 22 Oct 2026 14:16:36 GMT\r\nlast-modified: Tue, 22 Sep 2026 06:16:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nage: 187268\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MD3Oe87hqeDf%2BG4lheuud65XCJANL6XEaAui%2B9SwgKOIhjzqSliMHjfgLKfP0Em6PwkrvFx1pgfpGpEBuxrV7CMR3MJEVUa%2Fgnaa6TFPlaYqvxc4P0peZIhmvZyPmco7nGQDdd5BtA%3D%3D\"}]}\r\ncf-ray: a403c9acbc35d731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 162827\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162827,"size_decoded":163783,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 600x900, components 3","md5":"906f1892e0a9899d1aa0ae8db0331c2e","sha1":"730f796fdb06531758bd659df64ea6d4f4116fab","sha256":"a745595c863da697f3130cdf1e4190364760005c327e2827f04bc35cf0f7cb27","sha512":"dac465bfde34ed6060d8eaee41ff20af0cfb56d3105cdd214f3daf13bf9a1b2781740c79746fae931b201139fa391cbbe2e170fa4cd0865949a25e45ca726687","ssdeep":"3072:GvQd3zZo4ahTLiCa+ryX7+KxgD2sLKIsDFYPVcGCuzfuC/TD5grAdC/d:sQRtok+G/kLaFY6G5zfucTdA8e","tlshash":"9bf3233e729a8b4132f55c35b0456ce01edb90d3d0aed36b54c7596236eab07ce31ba2","first_seen":"2026-09-24T17:43:15.664969Z","last_seen":"2026-09-24T18:18:34.711492Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2026/09/graveyard-keeper-poster.jpg","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.714Z","timestamp":1790273865714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/graveyard-keeper-poster.jpg HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"6ab12843-edf1\"\r\nexpires: Wed, 21 Oct 2026 13:21:13 GMT\r\nlast-modified: Mon, 21 Sep 2026 12:51:15 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nage: 276992\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bjEvbb3DL89857cqSwMn38lxNXsxSs6kxLi2EewN6b5C95OzWxWwcFR54vAgu3S1SD0Cg42d4eQmpecAdEweMFCX8McUJGcPrP5ioE02O5CKXa4QMRmSqe1PAaLqZgFz1L4MHb4hmw%3D%3D\"}]}\r\ncf-ray: a403c9accc3ad731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 60913\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60913,"size_decoded":61861,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x450, components 3","md5":"207f56aa8ba19f69b330cb1ad98193e1","sha1":"5d46a354af248104d63ba9440ed7428feaf51752","sha256":"0a161eefdebc0dae5cd6f8297ac59600ef5a046304b6f6bdf17386c5131dbb1c","sha512":"3c504ecf97cbca51343253066ef953877b3f1d2056a9ceae510dbfe33bc4db742355ec0f112cc732fe905150090791a7f2a21d71b9e204f33497e86e510b3c9d","ssdeep":"768:smgyGpluQIMqiOrEq2nAehLlYUJwolT/4bkCzdW6K6cscOCXodtMKfGIEGnqJbXd:Ncusr1nwU/4dWDShD/nwb/qUf","tlshash":"c053f212f9135ac15e7a983423e169df98104efa625d00c142f7b3c729a98fae85fe31","first_seen":"2026-09-24T17:43:15.688401Z","last_seen":"2026-09-24T18:18:34.712083Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2026/09/Graveyard-Keeper-2-Poster.jpg","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.715Z","timestamp":1790273865715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/Graveyard-Keeper-2-Poster.jpg HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"6ab11250-32840\"\r\nexpires: Wed, 21 Oct 2026 13:26:12 GMT\r\nlast-modified: Mon, 21 Sep 2026 11:17:36 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nage: 276692\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vgrXHMaTiWHQg473nnA6808Zy3AHrZxb%2FiYuRy77pHpB89mIcaB3HBkBnJkp%2F4iDU1gvrwBmFiUeFRGbyaAjFcnvjOMUj5UFtJ9VHMIkhqy8XjDFPgeRPuQnVu%2FAI6Saav6dJ3%2FXgg%3D%3D\"}]}\r\ncf-ray: a403c9accc3dd731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 206912\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":206912,"size_decoded":207870,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x900, components 3","md5":"268f1689a8ab5ce364e9f2ecbff46826","sha1":"46c2464718402b2305f3fe8d435c58ef4d689618","sha256":"dda52a0a0a5474f8b2c534e7018abae86b35521d3e06e64bef9e56132d0017bc","sha512":"ae62345c3baafbdc1cc2d1e07aed00395178d47b49dc4b6eb7af28579bee021a2d9abb0c8a4bd4cbb29f5c7b07d94fceac7f9b76ca8f9e32a935b75d02e2a038","ssdeep":"6144:MFaeLGoJeKck3S+H1Wh+qGqTj9DqKqV8vnyVxURBYC/4P1fT2cz0mvt:4DJeKFSmcgqFVny2h/4P1LlzN","tlshash":"a314136540f3c6bdeccbc0b1a8b72c24ca5362c5c15b50cb1528ed2df658fe20a3a976","first_seen":"2026-09-24T17:43:15.692923Z","last_seen":"2026-09-24T18:18:34.712705Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.505Z","timestamp":1790273865505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:08 GMT","end":"Fri, 27 Nov 2026 08:06:07 GMT"},"fingerprint":{"sha1":"2F:14:FD:BF:8F:EB:2C:CF:88:9B:CC:4A:C1:C4:E2:AB:C3:12:F6:A5","sha256":"C2:49:9C:CB:35:19:09:8C:76:23:91:B1:4E:A3:4E:FD:14:CA:CC:68:8E:83:16:7B:06:CC:FC:A2:D0:49:61:F5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://steamunderground.net/\r\nOrigin: https://steamunderground.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 24 Sep 2026 16:56:55 GMT\r\nexpires: Fri, 24 Sep 2027 16:56:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 4850\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49131,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-24T21:13:31.751291Z","times_seen":345894,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":23,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/philosopher/v21/vEFV2_5QCwIS4_Dhez5jcWBuT00.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.526Z","timestamp":1790273865526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:08 GMT","end":"Fri, 27 Nov 2026 08:06:07 GMT"},"fingerprint":{"sha1":"2F:14:FD:BF:8F:EB:2C:CF:88:9B:CC:4A:C1:C4:E2:AB:C3:12:F6:A5","sha256":"C2:49:9C:CB:35:19:09:8C:76:23:91:B1:4E:A3:4E:FD:14:CA:CC:68:8E:83:16:7B:06:CC:FC:A2:D0:49:61:F5"}}},"request":{"raw":"GET /s/philosopher/v21/vEFV2_5QCwIS4_Dhez5jcWBuT00.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://steamunderground.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22052\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 23 Sep 2026 09:25:43 GMT\r\nexpires: Thu, 23 Sep 2027 09:25:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:03:31 GMT\r\ncontent-type: font/woff2\r\nage: 118322\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22052,"size_decoded":22865,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22052, version 1.0","md5":"cb86bac7dbcfc3c9b09bd068c08c7eea","sha1":"9bd46cadd1c94588a315eb6ca498a171998ff966","sha256":"aa134eeaa3e21f618aadf4347ca88893f72aef19cd9ecde6cfe449f3d0b5fa25","sha512":"6b63761aeb2e25a6c2211a3c71a9f7293c9d6257335609f8b20a1f11d22db8878efcc8c1405ed6bb2d19a564f99e48e203de801479f071667414ab5c0b47f925","ssdeep":"384:Mzq3rOei4zs/E9CTlcwGHCOb7/Sf8U88vqa4DoAmjB+4Ki:0q7Oe9iE9cqwGiESv80qa4kAGWi","tlshash":"f0a2d076f5a71b8f0597242424d4831231c2d305cdffda58664f480ba1ebed628e2f9e","first_seen":"2025-09-10T18:05:13.639332Z","last_seen":"2026-09-24T18:18:34.714124Z","times_seen":838,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":34,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2026/09/Dune-Awakening-Free-Download-By-Steamunderground.net-3.jpg","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.694Z","timestamp":1790273865694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/Dune-Awakening-Free-Download-By-Steamunderground.net-3.jpg HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"6aae2fb1-10110\"\r\nexpires: Tue, 20 Oct 2026 02:52:18 GMT\r\nlast-modified: Sat, 19 Sep 2026 06:46:09 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i\r\nage: 401127\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MuMsgv6XdE7%2FQFqDavaK%2Bluvl1sTjvasKS6J%2BcAcwxc%2BsVzOpDHfSPxL%2B7gj7yj9QUuyg5HvC4h8XRyiBS62ekhpXe%2B0sZ4WzPfNiPxiy8byrikDiApcSKJH8HDaFCpcf2ZZu1W7fg%3D%3D\"}]}\r\ncf-ray: a403c9acac22d731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 65808\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65808,"size_decoded":66769,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 616x353, components 3","md5":"8ee2fac3755a1f9cfad287ff2f645488","sha1":"3854676b1583aaafc4a52a3422514371611b78fa","sha256":"e8c9680e6e319d382e31624d321fa056d17048ba30a42c7af628392262a905a5","sha512":"2623c8f326862610dc525396738c2979642ef6db82aab186f5a81281d997d4b4a15530783e187290f626e8400e67c6669c8b4ef0cce0bd16e2947b2b695707c6","ssdeep":"1536:c/TO77YS1eKUVr7NpwZimlz4OZHmSdnrmowBX:c7O77YuYsZlYSdnrmoK","tlshash":"f15302a4f105d077f06184f16c044ffacab069e7b554ad919cca8ae1f6d03ce39ae636","first_seen":"2026-09-24T17:43:15.649241Z","last_seen":"2026-09-24T18:18:34.714936Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2026/09/persona-3-reload-pc-game-download.jpg","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.695Z","timestamp":1790273865695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/persona-3-reload-pc-game-download.jpg HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"6a9d5c0c-18b2e\"\r\nexpires: Wed, 21 Oct 2026 12:06:29 GMT\r\nlast-modified: Sun, 06 Sep 2026 12:26:52 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i\r\nage: 281476\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gmJGRXH2Q5cKkhq1QfDaqgpNZcdJxibxMst3ytLom2NnBsH6xN7WJYaS0%2FOV1t6Llk5MzzM4mdd1sKgnhlKFaoCgLkWNWWAKW8jM36Z85qo4Iuc9bCMSeM6gHMnrh2SCRRAg8om%2BHQ%3D%3D\"}]}\r\ncf-ray: a403c9acac23d731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 101166\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101166,"size_decoded":102120,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 616x353, components 3","md5":"3af5ea6868dcf15e6c84026ef59a516a","sha1":"597e935474495eae7be5b0c7fbafddcf3492a8e0","sha256":"27b1e473f745dbfd1aa0800f082825a24bb2c1621a02c466d58c6d51e55c8114","sha512":"7f9de0791ed8c2b047e3c1efabe52e2de951f97f61dc2e81cebd7e5fc2af7c43f672217c6d641ae36b4185d66f86ce23052514edc3cc35213e2740a86d152354","ssdeep":"3072:+ehZ4Y9fEcHeQNb6tH72qPaTMKKNxUCqPE:H0Y9nBNb6htPaT/QHqPE","tlshash":"82a312b815132507c94aa60bce5efd583023c2eaa6c7e5f8a9755642a4dc40befc72c6","first_seen":"2026-09-24T17:43:15.703209Z","last_seen":"2026-09-24T18:18:34.715844Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2026/09/Ved-Recure-Free-Download-By-Steamunderground.net_.jpg","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.702Z","timestamp":1790273865702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/Ved-Recure-Free-Download-By-Steamunderground.net_.jpg HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncontent-type: image/jpeg\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"6ab4cf24-2e182\"\r\nexpires: Sat, 24 Oct 2026 12:35:50 GMT\r\nlast-modified: Thu, 24 Sep 2026 07:20:04 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 20515\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lAn6cEKPPEJRnGp3hU%2ByOmRPiZRqTQ0pQodphMKsVD4kkjnXPVel6Vx16HDXmee3nDeLpQD3e%2B87vir85nAHAQ6OxPtNKu7gLc34X2pmKlcWr9BeQhVZjrZq0%2FvDezUZ8DANyuVydQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a403c9acac2ad731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 188802\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":188802,"size_decoded":189757,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x900, components 3","md5":"48231ab1d346c2b2e8ca48a4d00234ea","sha1":"2d359fa0497c1c16f01db4ae8e5bea1c4d0440e1","sha256":"74ef09f8b11214bab8d365b3f412f35dc900e9aeea5ad378238a85a5e47447ae","sha512":"e3ee968270e6a91b9e3aa932dc9b2331bfc2d1d3510506d4e82e6339e98f4a017a117ce03d7d067388dc45940af829b055ba4798cfac4b8fd734ee1a155ecdc9","ssdeep":"3072:19F3jUBcraYdOFGAfJehqn+BBGxyQ6JgM/+paQo91LX6zli:1n3YaOyAL+He6JgM/ZVtKzli","tlshash":"e60422ea974a0be0b26c91799ad34fb380714387666e273840fb55dbcfb08207476dd1","first_seen":"2026-09-24T17:43:15.704969Z","last_seen":"2026-09-24T18:18:34.716829Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2026/09/Well-Dweller-Free-Download-By-Steamunderground.net_.jpg","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.708Z","timestamp":1790273865708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/Well-Dweller-Free-Download-By-Steamunderground.net_.jpg HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"6ab374a7-1d936\"\r\nexpires: Fri, 23 Oct 2026 12:26:17 GMT\r\nlast-modified: Wed, 23 Sep 2026 06:41:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nage: 107488\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d1%2BV9%2B9%2Fafj6cyw58MEANRJalr51aecTwKjD98gmUlcjDya5%2B0pZRlgK1%2BK43GOZAeASURKwznJLLoyQBsgRIOfu1fj8VI2z%2FoWcqZFwJw5jNMRW3nESOmTam6gWssrj3r%2BQRtjfTw%3D%3D\"}]}\r\ncf-ray: a403c9acbc32d731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 121142\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121142,"size_decoded":122106,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x900, components 3","md5":"91a4e709434dc08172ada7a6ce8ba3a7","sha1":"6c08335f8ac843e6a975d97160ff4080fe6d223b","sha256":"24994c0b77e161ef97e1182634a4d3fc920844b9a650c19084be1935047f4f69","sha512":"9954dd2ab37a1ecdcc36b4db6ba632229d461268513b9badae882e8811df8dbe438cb56d5e8f3ac1b0c58e26ce56dd8ea1d65dcb9b0e8819b8ebc683c30cbe4b","ssdeep":"3072:Jfy/Mcv6lQnrizqLa7E3I9siAsNZxDDF+Ldua:5B66lvzINYSSxDDF+Ln","tlshash":"65c312a83957d4e3acbc0b562f570de44f88cb487966e05a5cbcc9c873cb5ad476a0c8","first_seen":"2026-09-24T17:43:15.723421Z","last_seen":"2026-09-24T18:18:34.717735Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-24T18:17:44.868Z","timestamp":1790273864868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-cache, no-store, must-revalidate\r\nx-content-type-options: nosniff\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 24 Sep 2026 12:52:03 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding, Cookie\r\nx-rocket-nginx-serving-static: HIT\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cAdfwk0eLYuy2NzTne00aCGkMoLOQoaGfK7GxjwVJBx5QUUFph9KEaoW4fdtHkhrO%2FdzMYrU971eJ8PbkcP05Nvc%2BhfEXFyJ3K3m6hSIuvD5EVRWnALVoxO37dClHpYTKTU2r03t%2Bg%3D%3D\"}]}\r\npriority: u=0,i\r\ncf-ray: a403c9a7ca1fd731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Redis Object Cache","description":"","website":"https://wprediscache.com","common_platform_enumeration":"","icon":"RedisObjectCache.svg","categories":["Caching"]},{"name":"Redis","description":"Redis is an in-memory data structure project implementing a distributed, in-memory key–value database with optional durability. Redis supports different kinds of abstract data structures, such as strings, lists, maps, sets, sorted sets, HyperLogLogs, bitmaps, streams, and spatial indexes.","website":"https://redis.io","common_platform_enumeration":"cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*","icon":"Redis.svg","categories":["Databases"]},{"name":"Redux Framework:4.5.15","description":"Redux Framework is a modular PHP library that allows developers to create customisable settings panels and controls for WordPress projects, providing a consistent user interface for managing options and settings.","website":"https://redux.io","common_platform_enumeration":"","icon":"Redux Framework.svg","categories":["WordPress plugins"]},{"name":"Site Kit:1.188.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:28.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":343426,"size_decoded":52497,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45604)","md5":"09faeea420fe70d15d9dc3e9530e401b","sha1":"5b35a95c685d522fafd7c1a56699fe4d444ea1aa","sha256":"b85d89c11439e153acaf15dc79dbadc68b773d529b08f5bc40db3bfb324ce126","sha512":"dc4754532f053eb5524f8402d878b33aca625a2c89e83044d84e5e28955ce0504bc00245ad21ce6aace0f86f8248d5aa03cb2d89b1f757d0140fd90656e52918","ssdeep":"6144:rNvEi3okBgK12978iNac5xKoN9aTnB/wonDqwo2ZzqY+1dXV:rREi3okBgK12978iNac5xKoN9CnDqwot","tlshash":"be74e8b61454203ef26783a9a195fe1d77d28107cb074ee4b3ec6ae8cbc2dd655a7308","first_seen":"2026-09-24T17:43:15.69609Z","last_seen":"2026-09-24T18:18:34.718885Z","times_seen":2,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":13,"connect":38,"send":0,"wait":159,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-09-24","alert":"Detects hex encoded code that has been base64 encoded","trigger":"steamunderground.net/","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2019-04-29","description":"Detects hex encoded code that has been base64 encoded","reference":"https://www.nextron-systems.com/2019/04/29/spotlight-threat-hunting-yara-rule-example/","rule":"SUSP_Base64_Encoded_Hex_Encoded_Code","score":"65"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-W7SD24P7S7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.507Z","timestamp":1790273865507,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"82:1C:33:18:03:EB:A2:89:36:B9:B7:0B:89:36:C6:F8:57:69:F4:1C","sha256":"29:1A:84:B5:D8:A3:49:02:4C:D7:48:7A:47:10:FF:83:DB:BC:B7:C9:20:8F:70:5B:F6:F8:93:22:AA:34:24:55"}}},"request":{"raw":"GET /gtag/js?id=G-W7SD24P7S7 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\nexpires: Thu, 24 Sep 2026 18:17:45 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 175874\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":524795,"size_decoded":176478,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"f92a96ff9054a48048cd49080642249d","sha1":"b8fb5807ff9404b1cc307e2549c63139a6f24b2f","sha256":"e198034de0f4c2b563d632e45be469d6ead5cfe3042645c73c77272133a0e50e","sha512":"c4428a7a3a7f1e7d884a033173a196f6bda97d6b4e1333ebe6273a6adff291ae5d6b95ed995e23b9ac0e9b5c71e66c82ef017eb7672725b4f7f58bd598575791","ssdeep":"6144:eB31iBQwAFAAwnQM0YrxQYS8cfmb9E0B3wXM+4OaIiOJwaYnI:nPAFAvQexF+4SiQX","tlshash":"68b4f7cd73d674229396f178903f018ba57b28a2b45cc89af289dce42e3465a5173f7c","first_seen":"2026-09-24T18:18:34.719853Z","last_seen":"2026-09-24T18:18:34.719853Z","times_seen":1,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":2,"connect":21,"send":0,"wait":61,"receive":55,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.511Z","timestamp":1790273865511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"6a4d9424-22bc\"\r\nexpires: Sun, 27 Sep 2026 13:25:58 GMT\r\nlast-modified: Wed, 08 Jul 2026 00:04:52 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-powered-by: centminmod\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\nage: 2350307\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2yUNsxmi0cUWBz9b0JLe8Hk7DyoW5ZURcCCj9wfPE%2FpETERZ8hBDYrMFh8G6nTcnCNgpAWXbKKs3D4C3XDo7zRGCV8M1UT8NEanYYGUk4Gn5X64pe7qVa56eVYeEvIzG4rQQIhlICg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a403c9ab7bbfd731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8892,"size_decoded":3887,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8892), with no line terminators","md5":"fb15a10a641a318f91e7e912e4f9c184","sha1":"bd41f67233facb96976ed7b8e7207d52c03d340e","sha256":"f40767552e5e94b2d5f9a65d7f640cfa7d225298023dbd682095e040809a3d1a","sha512":"49570d36e5b1ae3c3a4965f7d054258ff676326bee0d9399aa990926e9a762f699de1d09078debadc43b363ae51d740ba33f2e8c64bb223a73d3c62872ebb3d2","ssdeep":"192:pDvu5/2Pbq1Ztbat1oeeC9X8UnZ/HuuwJgbClRL/YeFG/uW1evaO3Ve:pTw/4QOx+R8puVY","tlshash":"b60233487946746b3973f0f6218f02ca353a24426ced6854a6e1f8e82d7858d1463f7d","first_seen":"2023-03-07T01:19:39Z","last_seen":"2026-09-24T21:12:33.909227Z","times_seen":76901,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2026/08/How-to-Fish-Free-Download-By-Steamunderground.net-3.jpg","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.701Z","timestamp":1790273865701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/How-to-Fish-Free-Download-By-Steamunderground.net-3.jpg HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"6a87f062-ffba\"\r\nexpires: Wed, 21 Oct 2026 12:06:29 GMT\r\nlast-modified: Fri, 21 Aug 2026 06:29:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i\r\nage: 281476\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2BAWcpef9d026SJFvC0E1SYukiMoblT4ZCNFArbbH%2Fao4ERtEch48RHq3Osgw4B4Gm%2FwU0ydCxD5JYN%2BFFZFRVgfHbpw6GKr%2F2NGr8fWuUn2opiLq6TPkk%2BUkg1LZmcBLRF45MgBUg%3D%3D\"}]}\r\ncf-ray: a403c9acac29d731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 65466\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65466,"size_decoded":66426,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 616x353, components 3","md5":"746ea661e2584dcbfbaf0ee1c754930f","sha1":"e6e3a4a51df898024c79b833832d374844476f72","sha256":"6e07d906788c8e180ee7a45c3cb9601346f7db732b39e10bfe0f3b3d87b7eaae","sha512":"aa417fde3d0b5c42d770241eec8c06d122f6084f0f74373b2f6f158e2d878865189b396d93470d1eea919fcd1fe34a77cd3d7b997838614c20e621f30924ecb8","ssdeep":"1536:sXY3RfgWLBE8idKIdp6zu5tutukAaoEvDpLBAJjF4RsBUp8esMCgV:JpW8idKIdktOaoqpLiJ54yOp3QgV","tlshash":"4e5302c3a6cc341d59205cb763bacdd661e7f2a1841b8aed6bc45f46c0e8be145c6b0e","first_seen":"2026-09-24T17:43:15.680458Z","last_seen":"2026-09-24T18:18:34.72186Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2026/09/SILENT-HILL-Townfall-Poster.jpg","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.704Z","timestamp":1790273865704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/SILENT-HILL-Townfall-Poster.jpg HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncontent-type: image/jpeg\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"6ab46670-2354d\"\r\nexpires: Sat, 24 Oct 2026 08:48:32 GMT\r\nlast-modified: Wed, 23 Sep 2026 23:53:20 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\nage: 34153\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8BZbstlxwYeLX4SAg8PvbEIP0L3pRpwL%2BBExGfIQHpviYtvywLirh2mB%2Bv%2F7CCQF3Z1JTaPj13LuVMqh%2FAI%2BOZW9uFjYX0n5oVCol58xnhJSTFmJOYFIX8UJWPR6Yp2Z6JRZDbB72A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a403c9acbc2cd731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 144717\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144717,"size_decoded":145676,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x900, components 3","md5":"9fa832a9352aed722f2429ffd2d9a2ca","sha1":"8f4b4ab3b6f93529449754fc3389aac2a56d4664","sha256":"f204212e9cac5d97f8f85fd76bf5aa57177f85c7a394ca54e4d8eda8bfcc991d","sha512":"2536cbbbe18e038941b8718d89a4a1b6a7cf4b69bc19b0b2ebf45cad50935a3715784f38539ca481ecd98e4dab2fb43c5b75746dc9eb77db85f644557b1f5118","ssdeep":"3072:bDrK4gJis/VId0GgmGldADA+C+rZ0gZbJRwXiG4/5kryTsXxF:2nJF/VId0j9dTA3ZbJmSG4CrTn","tlshash":"56e31252d1978366fc904c6a0c28edb16fd4dbcd360dd1afd94b46027a0dd27b6a8be0","first_seen":"2026-09-24T17:43:15.655859Z","last_seen":"2026-09-24T18:18:34.722795Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2026/09/Crown-Siege-Free-Download-By-Steamunderground.net_.jpg","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.717Z","timestamp":1790273865717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/Crown-Siege-Free-Download-By-Steamunderground.net_.jpg HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"6ab0d58c-27c90\"\r\nexpires: Wed, 21 Oct 2026 12:06:29 GMT\r\nlast-modified: Mon, 21 Sep 2026 06:58:20 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nage: 281476\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r5dwtYC8ZcczYRMPFAPNY5ofyGRDr80%2B7AdlPzSP7fk%2FIMaroXoNMPez5ozjx88TWykWg6jsyBHsdt8o5mtHtty1KqC3Sj%2Funli%2BcQnZvKIE8NK%2Bj1FQxQTFbBZjQQd5yEklZrPKKw%3D%3D\"}]}\r\ncf-ray: a403c9accc40d731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 162960\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162960,"size_decoded":163920,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 51x51, segment length 16, baseline, precision 8, 600x900, components 3","md5":"f1e1d678ed0bf390c1dd1e4b1ae30430","sha1":"ebdfffb1ad7973efb9a210017a99d739c8c5c5af","sha256":"ec2b94df019feff5fbfe0971e295d6c3be17d357c16e6044921f17f6db993028","sha512":"a5c9bdc9a59d87f0ab8a8c433b0b43497ba559cdba62234cdfea8da7ce1c4400e2eb31c6c90eb01dd511a3822521e5c919e3aeedb4042fc743e0715c7c10fbc4","ssdeep":"3072:PEGAeqDWZUTZKHETcNV8xP/zw7IQd+isjTEbAUR8J6LMez+tt:P9AeZZUTEHETcNV85E7IKsjg38k+tt","tlshash":"62f312b949c98c5ed900589a3dbaf941c8867fcd1d0048c980b71ba35ec77daa17a4bf","first_seen":"2026-09-24T17:43:15.658643Z","last_seen":"2026-09-24T18:18:34.723574Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/philosopher/v21/vEFI2_5QCwIS4_Dhez5jcWjValgb8tc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.503Z","timestamp":1790273865503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:08 GMT","end":"Fri, 27 Nov 2026 08:06:07 GMT"},"fingerprint":{"sha1":"2F:14:FD:BF:8F:EB:2C:CF:88:9B:CC:4A:C1:C4:E2:AB:C3:12:F6:A5","sha256":"C2:49:9C:CB:35:19:09:8C:76:23:91:B1:4E:A3:4E:FD:14:CA:CC:68:8E:83:16:7B:06:CC:FC:A2:D0:49:61:F5"}}},"request":{"raw":"GET /s/philosopher/v21/vEFI2_5QCwIS4_Dhez5jcWjValgb8tc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://steamunderground.net/\r\nOrigin: https://steamunderground.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 24 Sep 2026 12:20:18 GMT\r\nexpires: Fri, 24 Sep 2027 12:20:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:01:29 GMT\r\ncontent-type: font/woff2\r\nage: 21447\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22264,"size_decoded":23076,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22264, version 1.0","md5":"7b006f20321940dcb07f3baccb4ae0e3","sha1":"32bddaea5f3c71ce4476756fb73f648910890627","sha256":"1f486411fd520f64e57e73e3f8f66a617c27df97992bd3c51a411c74db0f765d","sha512":"ee2aa42fdf9741e166ae0743437a812c24f4c5a735fbd1c60212363aa06ea7af67d7e5afa22471a3ba66a0ba12ec0cf3aef5bac4d65420d77d3d22794ad211b8","ssdeep":"384:bJqYuf65wtC8cFuuuirdSge7RyLvy806a+tCm/FBobkNbBRMBwymtXKf:lqY94C8cFtuirdSge7RyLB0sZ/FBrVR2","tlshash":"21a2e1d1b5eb905ab2c17f3f5262bebc60997eae97020cf38055729800551e3748972c","first_seen":"2025-09-10T18:05:13.637248Z","last_seen":"2026-09-24T18:18:34.724808Z","times_seen":659,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":41,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2025/08/SteamUnderground-logo.png","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.693Z","timestamp":1790273865693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/SteamUnderground-logo.png HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"68b2f39c-19a9\"\r\nexpires: Sun, 27 Sep 2026 13:25:58 GMT\r\nlast-modified: Sat, 30 Aug 2025 12:50:36 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-powered-by: centminmod\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nage: 2350307\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4vEwAE22Qm%2F12G3k1y8StK9vdUc99KqpCex9Be5dGtraf6v%2BoXqPePwMVfwYsnLvDJ5f6E7F3%2B8DCtLcL%2FqHc1x8krd6tekBAinJNx6PLCIXytw2njZs2INd5pnmsZyln%2FiH1y7HLg%3D%3D\"}]}\r\ncf-ray: a403c9ac9c20d731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6569\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6569,"size_decoded":7552,"mime_type":"image/png","magic":"PNG image data, 150 x 45, 8-bit/color RGBA, non-interlaced","md5":"bff076ba6c15de3e2c57fab2cc209a8c","sha1":"cc442c5e05691f1fc4de4230f267ccafe19e0e42","sha256":"5022d93017817a432097e147e6696c6393fed8c4fb5695e9444abe3606ae8fd0","sha512":"25de608619c80dfaa3c2a3f136ccf9ef8b1cfb8e6ca6799945c2fe33fadde8cdd9dfe8b60fc430c13348d19eb2bc8ef27b72d627805be3699482c26900a5a4f0","ssdeep":"192:QIIHUCD4waHxB8gLz3dsCJtgccuL/z5syawav:O0w2B8iZjzG0E","tlshash":"66d1af88348600a1a48207b73eb6ed0b553ebfd11355bd3c9eb6511bc212a107c733af","first_seen":"2025-03-30T06:09:21.262112Z","last_seen":"2026-09-24T18:18:34.706716Z","times_seen":21,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2026/09/Happy-Wheels-Free-Download-By-Steamundergrond.net_.jpg","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.712Z","timestamp":1790273865712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/Happy-Wheels-Free-Download-By-Steamundergrond.net_.jpg HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"6ab21870-1d7c2\"\r\nexpires: Thu, 22 Oct 2026 14:16:36 GMT\r\nlast-modified: Tue, 22 Sep 2026 05:56:00 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nage: 187268\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fHuJ%2Bhzn7CI4YsytuETMY32mOOF921g4FwZ34WJ83Nk3h0fRc0tWlkdpt0De66pN%2BcsKOG%2B6%2BHX9myfXqgxORQ6z9%2FdE8JQPTAbH0%2BnYub8hmwaj0ZbBpLiqHNO9qKET4KFC6o412g%3D%3D\"}]}\r\ncf-ray: a403c9acbc36d731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 120770\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120770,"size_decoded":121732,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 600x900, components 3","md5":"cddfc21d41b3a48673ddcb38a00dcb22","sha1":"3248b92c66cc07ab201da9a9ba9ef07ba210f8be","sha256":"7f9db095d87c58877271d21e2e3df73f994e7d66c201535972581ed37dbdcc83","sha512":"f4dde0dba68cf79faeef391fc44e3e3666011320b19d5ad0037a6cc9c733871e8832511076c8990dd0506310c8834b4b71770800bb31b7872790fc3dcc00ca21","ssdeep":"3072:GAWG8qWYac2Ug4CNNXf+u/Mulw/5Y/QX4tHn:GAWnTc274Cz2+CX4tH","tlshash":"64c31265779e844cd998073f48d99f09f093e5511b098bbfe4b3cf8b7a5220da2073a9","first_seen":"2026-09-24T17:43:15.686634Z","last_seen":"2026-09-24T18:18:34.725485Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2026/09/star-wars-outlaws-pc-game-download.jpg","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.699Z","timestamp":1790273865699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/star-wars-outlaws-pc-game-download.jpg HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"6a9d5dfe-1498e\"\r\nexpires: Wed, 21 Oct 2026 12:06:29 GMT\r\nlast-modified: Sun, 06 Sep 2026 12:35:10 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i\r\nage: 281476\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w1wi%2FU7R2hba8UpN2mkBvTcz%2F55k%2B1wNLE76SrUESrRnrSwP22WgSyq3izCmCSLnm9cXDniZdQIqPEkyg2Rdjr5DMSRuHq3f7mh9Ib0%2FWBvHxa4fJpWbtcWTRwwxPEMjTvEAhdPiXg%3D%3D\"}]}\r\ncf-ray: a403c9acac28d731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 84366\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84366,"size_decoded":85323,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 616x353, components 3","md5":"43f164f7d084f1f4a16147c96e1078e5","sha1":"df8d5fab2d4e941a4acedbb85844d74cbf585aa2","sha256":"9a847bd20e582df95acf37c5a007b27952088ddba65adb8f47e9f2cad83049ad","sha512":"2938dc7d60c47725ada645ccb702efdaf89beab5434185f1a64527f6700e95bb836b623dfee49b4b2c18aa1e4965f076b16210de17930089a3966be53ef5dc1c","ssdeep":"1536:HZM8VTMPE3sNJrJ20ul5YaY/ePIVO+PAzD1ZFn2i0qfupf3Oxl9bfyBGhL/Wg1J/:5M8VpYhuDYRAIVtIFXPuR+fFfQ+Lh1Ms","tlshash":"2b8302946ae83fad0ed7ce1be19c777ea45cda124e287dc87ef5ab06c1401d16038685","first_seen":"2026-09-24T17:43:15.714899Z","last_seen":"2026-09-24T18:18:34.726138Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamunderground.net/wp-content/uploads/2026/09/CONTROL-Resonant-Poster.jpg","fqdn":"steamunderground.net","domain":"steamunderground.net","tld":"net"},"ip":{"addr":"172.67.201.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamunderground.net/","date":"2026-09-24T18:17:45.705Z","timestamp":1790273865705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamunderground.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 17:01:52 GMT","end":"Tue, 08 Dec 2026 18:00:26 GMT"},"fingerprint":{"sha1":"BB:60:AD:57:42:46:EB:7E:D6:19:5A:EF:38:22:C1:56:56:B2:5A:C6","sha256":"A8:54:AE:B3:99:30:28:1D:41:8E:73:D8:DB:92:7B:94:04:30:FC:41:12:B4:74:95:8D:18:56:A5:D9:BD:0E:40"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/CONTROL-Resonant-Poster.jpg HTTP/1.1\r\nHost: steamunderground.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://steamunderground.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\ndate: Thu, 24 Sep 2026 18:17:45 GMT\r\netag: \"6ab3bcc5-2d58a\"\r\nexpires: Fri, 23 Oct 2026 12:26:25 GMT\r\nlast-modified: Wed, 23 Sep 2026 11:49:25 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-rocket-nginx-serving-static: MISS\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nage: 107480\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sXnD4T8TJqtTu6m3ezqTFeyfNztoHaLU0qjSHvJs%2FAbpryhCZb4nqGat50G8yoR6f49agPYtPILECmtJVk7rDCBiA98IbWgGefrwMsavWkxB1803wSHcV6%2BF9VkPzZM04LrdzzNRWQ%3D%3D\"}]}\r\ncf-ray: a403c9acbc30d731-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 185738\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":185738,"size_decoded":186692,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 600x900, components 3","md5":"239ff8d06aa05e120eb6ec04bf0c1972","sha1":"e94806b1a9d5744a9f41813823b8ad698ef7323f","sha256":"edab77c620b7ce4fc4d74c6e01caa78ae1b0af70d3c68fb347724266ec830778","sha512":"c1d42d4381a28095750751060a1b1e92c32cffc0e512af65eead69ba1b2ae6e7d81c248479074efb8c14f3369da7167b3decfdfffc5e1b167748a4a7cce58287","ssdeep":"3072:n8+4J1BMRyl35k1j6teafXWS00VfGH5aLMK2j4XTiwb/BfGL4Nzs9rIy0cQ9lRZJ:F4Oc35qjWfXNVuH5Y0qmW/1GcNA9rx0r","tlshash":"d904226a31846f723d119850aef3cc2f80ecb55bc8495bfd275f0452facb6a46b04d9a","first_seen":"2026-09-24T17:43:15.710844Z","last_seen":"2026-09-24T18:18:34.72677Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-24","alert":"Sinkholed","trigger":"steamunderground.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}