{"report_id":"78fe692b-dbda-491f-b9b5-2b84c69b7ff8","version":0,"status":"done","tags":[],"date":"2026-10-09T18:01:29Z","url":{"schema":"http","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"172.67.147.175","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"title":"Sign In","dom":{"size":52249,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (714)","md5":"54451afedbaecc33aae4e9db04219e40","sha1":"af8535d10fdf2afbdca2ddc35ae7f29357f09800","sha256":"32f1b4cb16480cae63523704b311b5c7a138fc022a83a1853721ee8b71b70412","sha512":"9922d076273acbbb3dc9c36a535c46e6e8fb0b0c4502d1935d926e9c67998eb4e972a1e350c9598186281f748b4012484105e9ede9f90ade9ee47073d3e753e7","ssdeep":"768:Vc2ZB++aMId3kCu67VKn4TTcnT141hx1tOAsKggaPzOnZMe/7S4pCZFRHHg:Vh+tn/7VKn4TTcnqAZFRHA","tlshash":"fd333ea3d9c1413b261725d4b7633b7f79b2856bd6026820fbac63d80fcadd39726106","dom_hash":"domhash905330b2534847cb285a3a403c8d5545","first_seen":"2026-10-02T02:33:52.731137Z","last_seen":"2026-10-09T18:01:44.87625Z","times_seen":14,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"172.67.147.175","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T18:01:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"s.team-um.com","ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-28","domain_rank":0,"first_seen":"2026-10-01T03:40:32.393048Z","last_seen":"2026-10-08T22:36:17.11196Z","alert_count":69,"request_count":23,"received_data":984473,"sent_data":12275,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sowmoscow.com","ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-28","domain_rank":0,"first_seen":"2026-10-02T02:33:45.189748Z","last_seen":"2026-10-02T02:33:45.189748Z","alert_count":0,"request_count":17,"received_data":2107535,"sent_data":9279,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"community.fastly.steamstatic.com","ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":159922,"first_seen":"2024-10-31T18:27:03Z","last_seen":"2026-10-06T00:55:13.106432Z","alert_count":0,"request_count":11,"received_data":47177,"sent_data":6460,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"avatars.fastly.steamstatic.com","ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":125774,"first_seen":"2024-09-24T07:27:29Z","last_seen":"2026-10-02T02:33:46.069918Z","alert_count":0,"request_count":14,"received_data":59529,"sent_data":8256,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"shared.fastly.steamstatic.com","ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":78219,"first_seen":"2024-10-15T21:07:30.155663Z","last_seen":"2026-10-09T13:11:42.828581Z","alert_count":0,"request_count":13,"received_data":2644249,"sent_data":8123,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-04T22:47:16.540786Z","alert_count":0,"request_count":1,"received_data":5571,"sent_data":559,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"store.fastly.steamstatic.com","ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":81796,"first_seen":"2024-10-31T18:26:40Z","last_seen":"2026-10-03T12:34:43.056988Z","alert_count":0,"request_count":4,"received_data":43160,"sent_data":2350,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"images.steamusercontent.com","ip":{"addr":"23.36.76.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2014-12-04","domain_rank":202284,"first_seen":"2023-12-07T13:39:19Z","last_seen":"2026-10-04T04:51:20.197408Z","alert_count":0,"request_count":10,"received_data":6063747,"sent_data":6780,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.fastly.steamstatic.com","ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":93505,"first_seen":"2024-10-16T05:53:45Z","last_seen":"2026-10-08T22:04:10.762664Z","alert_count":0,"request_count":1,"received_data":1141,"sent_data":598,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sowmoscow.com/cc5a62cf5","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-10-09T19:24:02.254219Z","times_seen":95892,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"09274ae89585507b1dc21175baa2e927","sha1":"c467ff1c60e20a1c3bfff91a2a16059579db89da","sha256":"576c158d745e7bd7285f4529ce3a7d00efe50529098801599450390e99bd3851","sha512":"ac91a3e9ae9afb7ea9c6eb7288bb854d222495a16cdec34b908d91a5ec89b2fead268d08dda3ab0a4345ce2e00b151dc6851616f3b96e771bebeb717617fe45b","ssdeep":"","tlshash":"92d0223f09eeaf3ea33428972171b2aa2000279fa6ca40e2225e1f1d4033251414b199","size":218,"data":"","first_seen":"2026-10-02T02:33:52.956039Z","last_seen":"2026-10-09T18:01:45.055759Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1612b026df7e9ed2877b8f43a395f507","sha1":"ef572900a2aa299df9414d9699e9d1ad9a916427","sha256":"7ac92f6d272a17a2f6b5b66f06eada4feab60347e8d9b31bccb82fbd792da9b8","sha512":"f16391aec4bbc4efac60a88be370d809e72935d86e12d096f8a94242df0e357e42f42181bdd13dc0dd50e3162b3a99f5820ec311e8a52053f97bdc031ac69cae","ssdeep":"","tlshash":"dea0021e604c21034af2bf20b17b51f605973028544f54165401406a1556444d1c2665","size":64,"data":"","first_seen":"2026-10-02T02:33:52.959288Z","last_seen":"2026-10-09T18:01:45.056464Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eadfc88fcf861b90262eee493df29d1d","sha1":"3eb2220198716e92deb98cdfcb9954245eceee22","sha256":"e125b56233f05e83d90265444db1df107914a8ac85564e3ab94fa6b4ab148f54","sha512":"00450653fb16436584ddf7fed16a071756e4d1354e963d58ea8b44921dfe3369dd7b90106019e35a18694502f9342969922bc800210515025dce6d2b7c8caecd","ssdeep":"","tlshash":"e5117d55e1ba13b102efb939a7a656257331404b56454a243f8c87c21f55c3c27f0672","size":918,"data":"","first_seen":"2026-10-02T02:33:52.963576Z","last_seen":"2026-10-09T18:01:45.057125Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7fdd0ba879c7f522521cd2f1803a171","sha1":"8b50501216b65d7474b9ca9b994e2974e3586531","sha256":"400f155f4f9f8916773580363fc40e3ace59693ceefb8b3fd6d9abb324f9bab3","sha512":"785f8c5e3e2d1b7a4eb2342e18acfe3c999d33569350198226d8dff4a1ecf3433acec84a84de1a009a675be14b192016648814e33bd278eb8407f29fe69869e1","ssdeep":"","tlshash":"60119e256f26153e901a822e5a6ce78576791086129fd164357c2fed3fc3c20c6ab5f3","size":1006,"data":"","first_seen":"2026-10-02T02:33:52.965547Z","last_seen":"2026-10-09T18:01:45.058102Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/1399ad157/ffc79/118f678.js?v=RuZY1Xmx","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25e6c90d33922039c32f0c6fa44b0f42","sha1":"74a44700b57f4f9f1ba5fc5cefd8decfe8bffdf6","sha256":"8748ff3c3ef4374fd36e4131b308d3ca1ed018c8c0928d6163561d969953c90c","sha512":"a545b069a0f6dc6e1342bd3215910339756fd5ce4d34adfa34d7a7c76a668a7270ed3a989163533c340829ef29e3026c5e8a7fa7b48d2911a1f0544f7c9996e7","ssdeep":"24576:H8U5S1ZeR0JvmcxVBG/a4wuEOWKOV358nTRXUjSETuzdpV:H8UyeV","tlshash":"6255ea567e0f6d324033292e6d193477b13cd5a34e6ff1b4e687ad4ae92fdc28588860","size":1377487,"data":"","first_seen":"2026-10-09T18:01:45.066864Z","last_seen":"2026-10-09T18:01:45.066864Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/cc5a62cf5","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3917ac748df606e57f9462f5c98434c","sha1":"3fb18598942cf0cc0b81e7be5d19eee87b8d9a43","sha256":"8cd1b2976e38e1921bee79256817dee6c9c473091722c6741593a20e000a24b7","sha512":"d3a024513a2d352f127f18d2dea696bb5f71035a898060f528379a8a5ccb4f4b44037706986ce970e9c3b18a8def220a9fb9279edf262baa170529d82b92e000","ssdeep":"","tlshash":"78e0d897402647eef42825505be80e26e1620df235d90988834e9c4e646285bb43d0a5","size":343,"data":"","first_seen":"2026-10-09T18:01:45.069938Z","last_seen":"2026-10-09T18:01:45.069938Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/1399ad157/ffc79/50b14ae.js?v=RuZY1Xmx","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eba51a61894a773df5cab2a18e499c0b","sha1":"e028428f4f367af2660a66e976f223695020e732","sha256":"225edf54855697e6207ba9bded4d041d824e44c7c842f2803ede51764a9e54ab","sha512":"a57c4b5a43b3b629737c98ca9fb0cd549bc35c300208c23690bf9f04312d2aaca179d6cf523f031f2d6dcd42b4e8156a149b0ae676cc09737a6615c8d7119cfc","ssdeep":"1536:DPEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzmQ:oNMyqhJvN32cBC7M6Whca98Hrp","tlshash":"bd93d8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","size":95701,"data":"","first_seen":"2023-03-07T12:27:03Z","last_seen":"2026-10-09T18:01:45.020434Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/cc5a62cf5","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-10-09T19:25:25.855648Z","times_seen":240750,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/cc5a62cf5","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-10-09T19:27:06.846635Z","times_seen":768802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/css/shared_global.css?v=8","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.238Z","timestamp":1791568842238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/css/shared_global.css?v=8 HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 22 Sep 2026 19:37:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qoDZhv7fdVfDCnuO%2BuL5ZW9dZcjcNfQ4I0NcKCt1BmkGsgDvLK7wbJV1wKOn9h8r9RkhfsDpXvdDFygZ%2B8vHyQcmpxV3EPiPRafGK%2FIxgAZblcKGdiIKXksYoq3BhRRi\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6ab2d8e3-14987\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f494ffab156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84359,"size_decoded":19719,"mime_type":"text/css","magic":"ASCII text, with very long lines (1819), with CRLF line terminators","md5":"e94b42c40505a74da6dfb96d1a0a0deb","sha1":"117596e970491debe4203f0d133abf2ee42a6e26","sha256":"1dc0542f08da719710dbd0587331b129043c09a8e59cac4b319791cc4f861415","sha512":"406e12079f038163156aaecf9dc855e76e9e88a4c096cf2435841e80669763bd121a637e189a297f8c35ba4341e83d79201d07a7564821843e3cf1377d953409","ssdeep":"768:QvMiH60JA7oMzLWnhW6gNPasqxNRK8uWQMJ3JHKiiUaEpxfsN/WCcZZb98cxbYFI:OjKi+Ev5CovR+FGO9ErUnweoQn6MI","tlshash":"ca83d57ae587308b732b9964f3725b569e7800578b0e4bbcb1f4652ce2d40e836732c9","first_seen":"2026-06-26T02:14:11.643841Z","last_seen":"2026-10-09T18:01:44.885122Z","times_seen":36,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/css/header.css?v=8","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.246Z","timestamp":1791568842246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/css/header.css?v=8 HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 22 Sep 2026 19:37:03 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V0TSuEwdjs8bVzWEiLSW10NQzBBkYEUL0xAz%2Bm5lhqcdlaRMc49kh80dlHUq%2BpBPqyXHn3WPgMF8vRjxLoOcrued5MMxj%2Fy7uUH24%2FJusuv3GKo6Q8rdR6y5VYneXbH5\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6ab2d8df-2fbf\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f49500abd56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12223,"size_decoded":4357,"mime_type":"text/css","magic":"ASCII text, with very long lines (629), with CRLF line terminators","md5":"3bfa069dbdabe8457fb1b9ab6ab73bd9","sha1":"3e6d9cba4db955630bd23ef65a677f81153eaac1","sha256":"19def77fb68c6008294c48f576fc793d80f2ffda9ddb23bc18944be2e7d885ab","sha512":"58380e47b5b0653f97460b1b4ea4e5335406e1120a9ece2f43c8c9ece1db67771e648805750e500bf0d21e6eeb840ab78d1e4b269066a9ac79d970e66f2738ab","ssdeep":"192:CdBmFvo/MXMXIeIHNYgsayBgKGd/f2+Rcmp4sc8duvuoyx46l5JutE8h5spoK8e8:CDmFvVcXIeIHNYgsaSg1RfrpJc8dIG4n","tlshash":"ec428474ca92304eb21b65aafbb1536a5e0400a2de0f476df0aa7774e2944e875336c8","first_seen":"2026-06-26T02:14:11.669663Z","last_seen":"2026-10-09T18:01:44.887524Z","times_seen":36,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/loyalty/reactions/still/1.png?v=5","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.578Z","timestamp":1791568842578,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 12:18:32 GMT","end":"Thu, 19 Nov 2026 12:18:31 GMT"},"fingerprint":{"sha1":"73:3D:80:BA:FF:E1:7B:1D:0E:6E:9A:40:E5:15:C7:6D:FE:46:B9:44","sha256":"F6:FC:99:1F:A8:9D:10:F1:85:36:C6:51:C1:BD:A3:BE:67:18:DC:98:E2:29:22:39:6F:84:4F:11:66:3A:2B:B8"}}},"request":{"raw":"GET /public/images/loyalty/reactions/still/1.png?v=5 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-2e5c\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 76324\r\nx-served-by: cache-bma-essb1270023-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 761\r\nx-timer: S1791568843.947789,VS0,VE0\r\ncontent-length: 11868\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11868,"size_decoded":12272,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"d60516c2188a6bdcff950ae69bf6456b","sha1":"d5a5871c8bb6684ea8a6c5e67b45d3ed966b90a4","sha256":"73b69ee3ebab64a8e2567f0f913a0b2a471c7bc68be4a81b6e1ad1f32cc34b17","sha512":"ffdb6e9c4e1559a52a763cb91aa416fbd839270396800ce40ea26314acbd3bb4be89ef408ba36ab0c5f2385d4c173ce13b264ef7996347f2fa7a43657a8758ac","ssdeep":"192:iatXPGIqngfDESILTG60JBIwqfSI34mBbyxppXMwcpqFtXCOFkAkvyay/iM:iUmgfDEvGITf8mBmxHXuGtyorkvyaoD","tlshash":"0c32bf8a641d893e26e8188b16d3fca72fde613701e1b7f859091059d09fc7a8d73c21","first_seen":"2023-06-19T10:19:03Z","last_seen":"2026-10-09T18:01:44.889041Z","times_seen":414,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":1,"connect":12,"send":0,"wait":13,"receive":14,"ssl":295},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamusercontent.com/ugc/2324488744551344976/8C6D6FD326C8FCAF227EC20043B44710550EF868/?imw=506\u0026imh=284\u0026ima=fit\u0026impolicy=Letterbox\u0026imcolor=%23000000\u0026letterbox=true","fqdn":"images.steamusercontent.com","domain":"steamusercontent.com","tld":"com"},"ip":{"addr":"23.36.76.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.597Z","timestamp":1791568842597,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.akamai.steamusercontent.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 15:27:02 GMT","end":"Thu, 07 Jan 2027 15:27:01 GMT"},"fingerprint":{"sha1":"1E:9B:96:89:3E:03:79:C4:66:5A:85:05:4E:AA:87:29:54:12:C8:23","sha256":"63:B5:2A:C0:FE:ED:7D:91:BF:56:8B:A3:B7:6F:56:9A:88:43:C8:05:28:78:43:06:D8:08:15:5E:97:46:E0:02"}}},"request":{"raw":"GET /ugc/2324488744551344976/8C6D6FD326C8FCAF227EC20043B44710550EF868/?imw=506\u0026imh=284\u0026ima=fit\u0026impolicy=Letterbox\u0026imcolor=%23000000\u0026letterbox=true HTTP/1.1\r\nHost: images.steamusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 28 Jun 2026 20:08:07 GMT\r\nAccess-Control-Expose-Headers: origin\r\nETag: \"02e603cd7e70a6412ab0139e1ef25843\"\r\nServer: Akamai Image Manager\r\nContent-Length: 32239\r\nContent-Type: image/jpeg\r\nCache-Control: private, no-transform, max-age=595828\r\nExpires: Fri, 16 Oct 2026 15:31:10 GMT\r\nDate: Fri, 09 Oct 2026 18:00:42 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32239,"size_decoded":32651,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 506x284, components 3","md5":"2e015fa7fdf060af350f402ed123ca84","sha1":"5ca3419414ad474ec29c5f728f090333b6539ed9","sha256":"a9e344e8ca4386f6abe2687ab93978ed6f26ea7d485facc9063a8d9a1055c125","sha512":"ae00540e037b58a1f05ef83680ed65f51705a053bea46583424e19db1afffc10bcac41ad5e2bc923405aad885db50eec52c90001f6fa19b117aebc389415fefc","ssdeep":"768:a2PUJSQL9njEyQIke7FZRffoTPsTQJUiTCGNsT+r:aZJSQJgyQIZx7UPsTQqiTCGNG+r","tlshash":"e2e2f1af841eafb4d4352314169b4cb01aab252a45d887df678f36a9453e2fe0d16ccc","first_seen":"2026-10-02T02:33:52.796829Z","last_seen":"2026-10-09T18:01:44.88983Z","times_seen":14,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamusercontent.com/ugc/2324488744551331403/64696BB4DD51A2E8E61F730E2CE1D892E02FFBC4/?imw=100\u0026imh=56\u0026ima=fit\u0026impolicy=Letterbox\u0026imcolor=%23000000\u0026letterbox=true","fqdn":"images.steamusercontent.com","domain":"steamusercontent.com","tld":"com"},"ip":{"addr":"23.36.76.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.598Z","timestamp":1791568842598,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.akamai.steamusercontent.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 15:27:02 GMT","end":"Thu, 07 Jan 2027 15:27:01 GMT"},"fingerprint":{"sha1":"1E:9B:96:89:3E:03:79:C4:66:5A:85:05:4E:AA:87:29:54:12:C8:23","sha256":"63:B5:2A:C0:FE:ED:7D:91:BF:56:8B:A3:B7:6F:56:9A:88:43:C8:05:28:78:43:06:D8:08:15:5E:97:46:E0:02"}}},"request":{"raw":"GET /ugc/2324488744551331403/64696BB4DD51A2E8E61F730E2CE1D892E02FFBC4/?imw=100\u0026imh=56\u0026ima=fit\u0026impolicy=Letterbox\u0026imcolor=%23000000\u0026letterbox=true HTTP/1.1\r\nHost: images.steamusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 16 Aug 2026 01:58:54 GMT\r\nAccess-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-lease-state,x-ms-blob-type,Content-Disposition,x-ms-server-encrypted,x-ms-access-tier,x-ms-access-tier-change-time,Accept-Ranges,Content-Length,Date,Transfer-Encoding\r\nETag: \"0x8DC234445CE49A8\"\r\nServer: Akamai Image Manager\r\nContent-Length: 2404\r\nContent-Type: image/jpeg\r\nCache-Control: private, no-transform, max-age=24654\r\nExpires: Sat, 10 Oct 2026 00:51:36 GMT\r\nDate: Fri, 09 Oct 2026 18:00:42 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2404,"size_decoded":3062,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x56, components 3","md5":"f451795065f21f1c6c2c203b63d2ec91","sha1":"dc2c2037506281306f09504ca6cde232bf5eee8e","sha256":"04556072af411026bf0e43c6ac9eaf001390ac8457ef0237d79ab8a2c5c8efc4","sha512":"0175ba643017b681ec974bcce5f0f41c485d0531a564736807208bc754b5be1ee58cb1b30c33424230396aa833c56307494d9e5cf5d252a9574c445be57f0909","ssdeep":"","tlshash":"5641072162883128f818b2f8aa2dab442b1c605e409cbde509560f1a05fbf064bf260f","first_seen":"2026-10-02T02:33:52.739787Z","last_seen":"2026-10-09T18:01:44.891809Z","times_seen":14,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamusercontent.com/ugc/2324488744551339643/D320F001A455966BBCB0DA8B9FA162CAFF64C3C7/?imw=100\u0026imh=56\u0026ima=fit\u0026impolicy=Letterbox\u0026imcolor=%23000000\u0026letterbox=true","fqdn":"images.steamusercontent.com","domain":"steamusercontent.com","tld":"com"},"ip":{"addr":"23.36.76.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.600Z","timestamp":1791568842600,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.akamai.steamusercontent.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 15:27:02 GMT","end":"Thu, 07 Jan 2027 15:27:01 GMT"},"fingerprint":{"sha1":"1E:9B:96:89:3E:03:79:C4:66:5A:85:05:4E:AA:87:29:54:12:C8:23","sha256":"63:B5:2A:C0:FE:ED:7D:91:BF:56:8B:A3:B7:6F:56:9A:88:43:C8:05:28:78:43:06:D8:08:15:5E:97:46:E0:02"}}},"request":{"raw":"GET /ugc/2324488744551339643/D320F001A455966BBCB0DA8B9FA162CAFF64C3C7/?imw=100\u0026imh=56\u0026ima=fit\u0026impolicy=Letterbox\u0026imcolor=%23000000\u0026letterbox=true HTTP/1.1\r\nHost: images.steamusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 22 Aug 2026 15:55:00 GMT\r\nAccess-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-lease-state,x-ms-blob-type,Content-Disposition,x-ms-server-encrypted,x-ms-access-tier,x-ms-access-tier-change-time,Accept-Ranges,Content-Length,Date,Transfer-Encoding\r\nETag: \"0x8DC23446FB205CD\"\r\nServer: Akamai Image Manager\r\nX-Serial: 1817\r\nContent-Length: 3686\r\nContent-Type: image/jpeg\r\nCache-Control: private, no-transform, max-age=485\r\nExpires: Fri, 09 Oct 2026 18:08:47 GMT\r\nDate: Fri, 09 Oct 2026 18:00:42 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3686,"size_decoded":4358,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, progressive, precision 8, 100x56, components 3","md5":"8c0010358e3364900b1c629cd7312922","sha1":"fc9085ca89c6536b5919fcc51772b06b6ee03e6e","sha256":"9939ee346095e83efc5ec5420d93cf7f4170220fc91a4779179dcb7292c54ad6","sha512":"acb9bb1508320ba0ff94cd8174bbc8b446a2be43e2f9fdc7e074b6e4e3687060ad8201a35e9e8107045dfabf9da40f9950a9460f3ef624e4a6f2ade10a3eed86","ssdeep":"","tlshash":"de718d26a45b12ebe83984f05fcc2e39c5fbb04668cd146542f20bf6313d39b9954734","first_seen":"2026-10-02T02:33:52.88275Z","last_seen":"2026-10-09T18:01:44.89317Z","times_seen":14,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/1399ad157/ffc79/a00719a.png","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sowmoscow.com/cc5a62cf5","date":"2026-10-09T18:00:43.309Z","timestamp":1791568843309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sowmoscow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 16:46:44 GMT","end":"Sun, 27 Dec 2026 16:46:43 GMT"},"fingerprint":{"sha1":"3D:53:78:1E:D7:E4:B5:A1:9D:AA:AA:29:4C:4C:65:4E:49:46:6B:8D","sha256":"5D:4B:49:1A:59:A4:4C:84:AE:D0:47:21:8E:AE:B0:B5:64:CC:8A:83:1B:99:16:1A:AE:9C:25:09:01:CC:AA:0C"}}},"request":{"raw":"GET /1399ad157/ffc79/a00719a.png HTTP/1.1\r\nHost: sowmoscow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sowmoscow.com/cc5a62cf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:43 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E3fiuOl13prmeaApoQqaq7hmca9B7%2B9roHuDCslzeN4UDgksIwXkmPXwjVNDapyI4JWWWDdTG%2FDfIuykwbSnYJGilvt2XNE5SRaIIJNoY60w8DMBd1rEkgd0gwSC58Jn\"}]}\r\npriority: u=5,i\r\nlast-modified: Fri, 09 Oct 2026 18:00:43 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f4956afb4b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7850,"size_decoded":8466,"mime_type":"image/png","magic":"PNG image data, 356 x 89, 8-bit/color RGBA, non-interlaced","md5":"d4871e74baa164f47ff17f3d3f4240ed","sha1":"ffed4b3c6e124dfebac6515001bb1a3cbddd4b71","sha256":"af9ec5a8fb608bd39dd0f8a69a5927626bc12ad901641325864265407e72c062","sha512":"2235d10737032ef16eddaee28c21101b0d52147fe1ebe1557f10018f1271d64850ccfb66e24ae60384ecdd8e6fe607607859d16a7ab97ef5227adc5477e32709","ssdeep":"192:wbIacEl1NyBNG58kG8wlzXyHTmAm1r7/s68wAUKe:Oc2NP+/8wZyHTq/R8wRKe","tlshash":"07f1af6d74ff4d2db9cd936922c9d0056054ddf83a4a3512449ad24d6dfde2824c06ae","first_seen":"2025-12-01T02:27:57.927661Z","last_seen":"2026-10-09T18:01:44.894687Z","times_seen":3,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":290,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/css/profilev2.css?v=8","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.242Z","timestamp":1791568842242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/css/profilev2.css?v=8 HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 22 Sep 2026 19:37:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2BeIWNmGPJKWVluIKsdNvVoz9s9w4LRYuLHwiDmwOBHQCFrBa5jQJeBPinVuJIAq1efbhyS0rB%2F20UYYRhYnzyl2zzTKZ3j3mT8F1V8jflrXhxdADLTfSDYlYz1D0D3T\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6ab2d8e2-15faa\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f494ffab556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90026,"size_decoded":18779,"mime_type":"text/css","magic":"ASCII text, with very long lines (1627), with CRLF line terminators","md5":"1ef706870f94d3a850a76738eb9c660f","sha1":"3a8ca616ba0790548f593cb642fd21e786182424","sha256":"aabbb69739184796d7073098f3c8ea08f5551642ea34fac885ac536bd61adb28","sha512":"29dcc3dc1bb2b307abc7d6776f4a09f888ddd97ccb24a41839b54794a29ff542ec980a948fd99a05d956134d970b1b65aecffbdb01f5986a97c89cda055ebf4c","ssdeep":"768:VV/pSskuA0HO0HyHTgJR+8P5JlIkTKDT9kzh6ruT5LOJHkvqnFnOePv+5n9IAjOH:rpWHT4RJBTET6dOMA2Q9GseXr4","tlshash":"9b93a559e95b701fb337b9f6fbf16b468e204026e70a0779b4d4746c9ac446c22b32c6","first_seen":"2026-06-26T02:14:11.667444Z","last_seen":"2026-10-09T18:01:44.898186Z","times_seen":36,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/css/shared_responsive.css?v=8","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.245Z","timestamp":1791568842245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/css/shared_responsive.css?v=8 HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 22 Sep 2026 19:37:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LP0ibiCgCfJuN6%2BAQccLbKj%2F2V%2FDZBtKEgpAAfOYcbhWX44lA%2B%2FceElWqmnIluf5qNw3dR4KFAlOjgAVtKIW57Dpi%2BdtY3RBq%2B7S1%2B3fOwRFjuTIbefxdp0KlShk8gVc\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6ab2d8e4-568b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f49500abc56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22155,"size_decoded":7317,"mime_type":"text/css","magic":"ASCII text, with very long lines (1673), with CRLF line terminators","md5":"6ed90f63ed407ade364f3899b323ba68","sha1":"673e8e1b5b418866c249e50fecf4812f60c4cc58","sha256":"28b1af69b330e2ac6bf23eeb821b5577cab10ea6f608441b3332fa310d001c7e","sha512":"93bc7be1fb008deeef2012166966f91325b09995907f87d09d0c44731596b89c5b8005475dcb68baf6940086e9d41b115026c3cfebaa73327ae5bb7334ba6d87","ssdeep":"384:f2pVdp7TYb2zCN9cE+W7y7HiuKiNleHv7xTLsPDpUbIrw6GNNZhwePByI:fmjpvFzCN9cE+W7SHiufEHv7xvsPDpUd","tlshash":"c0a2605aad27a10aa3177345fb750f612f2581647f0e42aab7f8312862d536c61a33cf","first_seen":"2026-06-26T02:14:11.724475Z","last_seen":"2026-10-09T18:01:44.899551Z","times_seen":36,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/images/header_menu_hamburger.png?v=8","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.538Z","timestamp":1791568842538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/images/header_menu_hamburger.png?v=8 HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 22 Sep 2026 19:37:47 GMT\r\npriority: u=5,i\r\netag: \"6ab2d90b-ec1\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XVO75qcZCwpwYjd9vEwmnVB3kTIrqluRsJ%2F%2FQZ4vsYrnCbdys%2FpoytAKidLzGOLxv%2BGK964eacVjVRJ9byuzthSy3znpn%2BOUFiOMg%2BybQar8R%2B9g2QYX0Nf7xqUscV2w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f4951db1156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3777\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3777,"size_decoded":4473,"mime_type":"image/png","magic":"PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced","md5":"eabc76eb57feae44add7faead028521e","sha1":"4e3e53938fad15661d2d046a868338841a95db19","sha256":"fc9e6260a2706ae146282d77e67bc1b74688435f8912ab4c1932641eec28bffa","sha512":"5c6da6eeefddf321c2bc7e39a134e0a3140a9f93ad1560b2e102ef60ec218c29aae14ed344c79e25cc5493cd15551040d8c909de28dcab02034d787563104e07","ssdeep":"","tlshash":"eb717ce7323e5456e1f056c6015b52f69eb1a1080d2b4e09f224b77831ac63be38333d","first_seen":"2023-04-05T21:31:08Z","last_seen":"2026-10-09T18:01:44.900979Z","times_seen":7767,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/badges/01_community/community03_80.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.580Z","timestamp":1791568842580,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/badges/01_community/community03_80.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-2dad\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 54642\r\nx-served-by: cache-bma-essb1270034-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1294\r\nx-timer: S1791568843.924487,VS0,VE0\r\ncontent-length: 11693\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11693,"size_decoded":12098,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"0296c81baa7b0d04b74990f082fe9475","sha1":"912da7013e7c02e84f84a2b94f082eded8cac71c","sha256":"4371f0821d4fa5edd74f63951ed305acabc482ccb1382e1b06ef81eaf96dd803","sha512":"a20de1c614b9bb1b77b7b884ddd5ac5c6599aa9a1346cc991fcf9bf4c0b28c854e2411d26f172af8f6a267e00766f5908f75b4a115c9e9da57eeebff6ec4ff13","ssdeep":"192:n0c4cI3A2yf7Ab3ND+iqyGMT9qYjnNIogkt4b5nK/VfpVGYKjPu3X9IO1Z20:0cNI3MEbD1GliIoftiK/VfpV9KzaPM0","tlshash":"c932bf0c4f5113e6909d91ce08f29c32e52ba5c18691ea35e58fce873f507941e862ef","first_seen":"2023-05-10T19:23:13Z","last_seen":"2026-10-09T18:01:44.903005Z","times_seen":153,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":19,"receive":0,"ssl":263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/badges/48_communitycontributor/1_80.png?v=2","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.582Z","timestamp":1791568842582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/badges/48_communitycontributor/1_80.png?v=2 HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-2847\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 44014\r\nx-served-by: cache-bma-essb1270034-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 509\r\nx-timer: S1791568843.661124,VS0,VE0\r\ncontent-length: 10311\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10311,"size_decoded":10715,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"60cfdead26c8f7a78f33de8b4c9d3476","sha1":"db1cd4860d8de63d9a653080e5044d4669bca354","sha256":"f9750aebcc2487ba47c957e9779b5ac84d0aae7ee3a0c9c80ab394567efd1693","sha512":"b2f7943c947f56ee2131c4c3c182d6fc5ab8f5d0c50b91b67104409fffaad4143bc3c35cadbb724294a962dd3519bf0307920e90a057f6ef3204331de5a8c588","ssdeep":"192:xgNLe4Y1YDEaG/BYaJmNxEfILS9yJGAXeUWsOET10MHGL6wBYhEfF:xgFeFG5GJdJmNGf3UGAOUOEx0SGL6pwF","tlshash":"b722a0eff0cac1a92ebc675f269680a486b2b050ed354f1ade2812ec7d2534ec3dd415","first_seen":"2024-01-30T04:01:11Z","last_seen":"2026-10-09T18:01:44.904926Z","times_seen":59,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":10,"receive":2,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.fastly.steamstatic.com/9638437f2e17da396e02756fa51e174af037d86f_medium.jpg","fqdn":"avatars.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.591Z","timestamp":1791568842591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:12:50 GMT","end":"Wed, 18 Nov 2026 06:12:49 GMT"},"fingerprint":{"sha1":"F7:B7:EC:30:15:85:8E:0C:D2:C1:E1:E6:13:0F:50:7F:10:DB:B3:BB","sha256":"B3:0D:07:72:5D:93:9D:92:7C:FD:0A:A5:C6:EF:E8:3F:3D:9B:C7:3A:60:CE:2F:5A:DC:34:1E:49:7B:1D:82:54"}}},"request":{"raw":"GET /9638437f2e17da396e02756fa51e174af037d86f_medium.jpg HTTP/1.1\r\nHost: avatars.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: wGXE07Ok6SKVW6XHt12hpQ==\r\nlast-modified: Wed, 02 Sep 2026 20:06:31 GMT\r\netag: \"0x8DF092DAE64047A\"\r\nx-ms-access-tier: Hot\r\nx-ms-access-tier-inferred: true\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1388722\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270057-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1791568843.957300,VS0,VE1\r\ncontent-length: 2469\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2469,"size_decoded":3054,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 64x64, components 3","md5":"c065c4d3b3a4e922955ba5c7b75da1a5","sha1":"ac751f0e529a670b7a26072baaa75ebb1cbf5a46","sha256":"9ba9010c28a1a6e2f0baf02101b59c46d752ce1260a1d5c831b5c068df7a47aa","sha512":"ada2870154188c66b205b01ce3255656f43d6c69cef29c7389e8a0e16674dd33f2c9060f9866d12e689ac8642415d046df2db2476ff628db1030f5ef006a9e32","ssdeep":"","tlshash":"cd513ae9b3c725f6fc498678c234df70e1c42843a0cda0ac9fe3188955e9b438168a19","first_seen":"2026-10-02T02:33:52.902777Z","last_seen":"2026-10-09T18:01:44.909251Z","times_seen":14,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":1,"connect":10,"send":0,"wait":47,"receive":1,"ssl":297},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/1399ad157/ffc79/b0b8d55.woff2","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sowmoscow.com/cc5a62cf5","date":"2026-10-09T18:00:47.324Z","timestamp":1791568847324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sowmoscow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 16:46:44 GMT","end":"Sun, 27 Dec 2026 16:46:43 GMT"},"fingerprint":{"sha1":"3D:53:78:1E:D7:E4:B5:A1:9D:AA:AA:29:4C:4C:65:4E:49:46:6B:8D","sha256":"5D:4B:49:1A:59:A4:4C:84:AE:D0:47:21:8E:AE:B0:B5:64:CC:8A:83:1B:99:16:1A:AE:9C:25:09:01:CC:AA:0C"}}},"request":{"raw":"GET /1399ad157/ffc79/b0b8d55.woff2 HTTP/1.1\r\nHost: sowmoscow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sowmoscow.com/1399ad157/ffc79/5628c0e.css?v=RuZY1Xmx\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:47 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gBW4v%2BD%2FmImzXhRXAgkocI%2Fl4On8tBVeOnr9oZ1zoFBc3VOIdKeYnKs%2Fy%2FHmFSvHjttUnn324R1lf%2F4tBDtHHs9H%2B%2FawfljRD%2FcyAJSZS4KGAM6grOiv%2FT7gLwG%2B1Jn6\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 09 Oct 2026 18:00:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f496fccf1b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15016,"size_decoded":15668,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 15016, version 1.0","md5":"ba310d7242d2b12ea5d769a79b55d975","sha1":"6808a778ef9d8aa896ed86856f0396fc8e9b9526","sha256":"4675a8ce063f9f5885a692f7a273acf7eeb800abca14aac75b6707b689532f04","sha512":"dc4d52564c4a7d54f1f021e2005b7520024b91359f47adbb029f3125539c42ff5d323e1264e5b500cb632b194baef620ae1cfdf0e57efded1175b201225be767","ssdeep":"384:ijn0/6PcBvW962uvJPaLc73VMYQyxRM8inXa6Bjgre:Kn0/A+W962uxSLW3VMCjfCXbWre","tlshash":"9562bf2e53f21195d3db177028ea7113916ade48a23fca4ca216f9df52c66c3188b51d","first_seen":"2025-09-27T06:36:03.69501Z","last_seen":"2026-10-09T18:01:44.916135Z","times_seen":40,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/css/stickers.css?v=8","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.244Z","timestamp":1791568842244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/css/stickers.css?v=8 HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 22 Sep 2026 19:37:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oo4nxi6n15YCHpnNoPRMcplbTLywEIbC5hN%2FyD%2BHN2xlDigpvBKNdBBOfnQhSbMYoYbZqTlDTaqdif%2F6XNnq3kx7z9wm%2FlmrDWrAp%2BNtncSBmb49NcYYlxgIfkmtTkm9\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6ab2d8e4-20e7\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f49500ab656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8423,"size_decoded":2822,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8a62c866da0959885705546bd52f8e5a","sha1":"6f3e099083145f09c692511cd9841e05a7c562d1","sha256":"5b6eb5e229668ede597b45bd835911165850b00e29bba16a50367b1064f4a9e4","sha512":"de08e8474aebd548d827c05d1550ce317be7b3dd8c5a3182be671ece432fdca38f3c8aabbb6fe03e2c3021369a677ebb6c97c20206cfd4d8afdea27e9c0362c9","ssdeep":"96:I1NuOg5HJo0IHOVpLBZ1SLScuYFdHYJsAUPULtD/nL4YyypeoVR6fQjyhlEnWNkz:fppR7bUY6A7D/kY9gyyQWN2lXB","tlshash":"6a0240999b1b300fb21b76553bf11ba54da5c423ea0f0badb4a52254d3cd87827732ce","first_seen":"2026-06-26T02:14:11.712759Z","last_seen":"2026-10-09T18:01:44.921823Z","times_seen":36,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avatars.fastly.steamstatic.com/47239a6239fd0528d395b9501acc801de45ed6d1_full.jpg","fqdn":"avatars.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.558Z","timestamp":1791568842558,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:12:50 GMT","end":"Wed, 18 Nov 2026 06:12:49 GMT"},"fingerprint":{"sha1":"F7:B7:EC:30:15:85:8E:0C:D2:C1:E1:E6:13:0F:50:7F:10:DB:B3:BB","sha256":"B3:0D:07:72:5D:93:9D:92:7C:FD:0A:A5:C6:EF:E8:3F:3D:9B:C7:3A:60:CE:2F:5A:DC:34:1E:49:7B:1D:82:54"}}},"request":{"raw":"GET /47239a6239fd0528d395b9501acc801de45ed6d1_full.jpg HTTP/1.1\r\nHost: avatars.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: m6VvANN4Iy4lA1kWPtH3TA==\r\nlast-modified: Wed, 16 Sep 2026 10:25:51 GMT\r\netag: \"0x8DF13DCE20BE678\"\r\nx-ms-access-tier: Hot\r\nx-ms-access-tier-inferred: true\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 327600\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270057-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1791568843.948008,VS0,VE4\r\ncontent-length: 23139\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":23139,"size_decoded":23724,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"9ba56f00d378232e250359163ed1f74c","sha1":"3bda7a32092ec1a41f35eb83b21e145564297cce","sha256":"567817c3e7328c1542fe1069af772f7a90fcb24910c948decb761151646a2dca","sha512":"1dd5fc1fa8313093819b4b90c7e322fc3bd2bb60fcf08da09b634b26a1985137762df909e6567a74931fb8e8d39a5891c903f31faac4d41055b3b232f057a505","ssdeep":"384:j2Ip6pyySToAhMTzfkjbBCkryyUe/aoh+lhqxYgLmndZXeqvxJ1OAos1q3p3fpTj:jfopIMAhszfkjbBfryDyR+qxY7dFtLoB","tlshash":"66a2f24e62c8d4eef823f98a5ac3feda15d49ff0a07b62c245d80d07266b21536931d7","first_seen":"2026-10-02T02:33:52.874869Z","last_seen":"2026-10-09T18:01:44.924421Z","times_seen":14,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":307,"dns":0,"connect":0,"send":0,"wait":21,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/sharedfiles/add_fav_ico_default.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.571Z","timestamp":1791568842571,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/sharedfiles/add_fav_ico_default.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-44f\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 24808\r\nx-served-by: cache-bma-essb1270034-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1378\r\nx-timer: S1791568843.661737,VS0,VE0\r\ncontent-length: 1103\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1103,"size_decoded":1506,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"b5c472ea5c08fb55f8be89eeb9a540e8","sha1":"f93f242fa79115c1380a02c6d9dc8e63e62550a4","sha256":"1706a3ce38720f841d95fc0b5033b10c496ac568ecb04a0339719cbfa9995553","sha512":"803b86fa8e48ab3d0c523fa0da80fee1c52c1db58bce8a5a8815db0f8c93b79c2889a83f632c05a71f7cac5902fa5adb5e07b3b4af86d7a9f99ab2e53f8f1d79","ssdeep":"","tlshash":"aa11635ef6806c044108cb9918e6503bda164400e8d4eea7bdcaec1a5e321f884096e7","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-10-09T18:01:44.925795Z","times_seen":473,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/loyalty/reactions/still/19.png?v=5","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.576Z","timestamp":1791568842576,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 12:18:32 GMT","end":"Thu, 19 Nov 2026 12:18:31 GMT"},"fingerprint":{"sha1":"73:3D:80:BA:FF:E1:7B:1D:0E:6E:9A:40:E5:15:C7:6D:FE:46:B9:44","sha256":"F6:FC:99:1F:A8:9D:10:F1:85:36:C6:51:C1:BD:A3:BE:67:18:DC:98:E2:29:22:39:6F:84:4F:11:66:3A:2B:B8"}}},"request":{"raw":"GET /public/images/loyalty/reactions/still/19.png?v=5 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-2439\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 70138\r\nx-served-by: cache-bma-essb1270023-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 826\r\nx-timer: S1791568843.948132,VS0,VE0\r\ncontent-length: 9273\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9273,"size_decoded":9676,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"a1b4853ea557d40309fed43c2732e17b","sha1":"e0ef23caf547e0fe25f3c76253c1dbc25998a7dc","sha256":"7777938692e7af934dbd13f98eb6ae206740359c6fb0c89c2aa731623c1c3b7d","sha512":"8e35827dfb1eca1f67d03adceba05b0bce2baf7a1c8b235f47b105b36f5ffc59c1b1b09166d5eeadff114c900975de25d6e1dc7dc25b5eaba0936f2858e4cfda","ssdeep":"192:iRfNYFvxP2vcMnIiLXZWjlzErnFMopVUrPeFj/WkchErb/HJT:iXCZP2v2iLQlAkrEY2b/HJT","tlshash":"7a12af0cb2e4b18c9ddf63c663b4a4443368a7ac94c79978321c8aa25c44a6c7d58f3d","first_seen":"2023-05-17T20:27:06Z","last_seen":"2026-10-09T18:01:44.92764Z","times_seen":210,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":1,"connect":13,"send":0,"wait":53,"receive":5,"ssl":293},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/badges/02_years/steamyears4_80.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.581Z","timestamp":1791568842581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/badges/02_years/steamyears4_80.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-1ea2\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 20212\r\nx-served-by: cache-bma-essb1270034-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 352\r\nx-timer: S1791568843.948022,VS0,VE0\r\ncontent-length: 7842\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7842,"size_decoded":8245,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"c458026db7483300fb5e23f92cb797c2","sha1":"5df3d293dc4919a2cec0d5db8b33e6c8e9590bf9","sha256":"d1a55bfee32a72a57b965333b90e6a57b7581640520f10f3606e4dd01b987f2f","sha512":"58c6df5776c07379bf92a09973a8a796d1149ba9c29be5ff455ee7e101e5e35e0e133ba9b6131dd7a3554bb4515e3637307646ac954176dd4b4eec1f2683618e","ssdeep":"192:n1mNBI7iHCybrY8E8yl1sgQ5vgfWmFnGhWaFMZq:Ef3Y8D+1BQZ2zIWW","tlshash":"8bf1a09b5da85c813a0dd6c3458349adb61b10b1d8ddd138f5d7c74b16ba0a407df4d3","first_seen":"2025-03-19T10:59:46.856221Z","last_seen":"2026-10-09T18:01:44.931175Z","times_seen":88,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":13,"receive":0,"ssl":263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/fonts/MotivaSans-Light.ttf","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.692Z","timestamp":1791568842692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/fonts/MotivaSans-Light.ttf HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/css/motiva_sans.css?v=8\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 22 Sep 2026 19:37:13 GMT\r\npriority: u=3,i=?0\r\netag: \"6ab2d8e9-1df24\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ob5B35oHKXdgx2hy2aDEsd8gTVAkF4XEjTQz2OPWqqIeBdhkqHiZ0kfz5jau3W%2Fdxe866MhcepaKnLH6nHzaD6ot2cnZhpZXQ0WgFYb7E2626HnmpzPUr%2B4jakXFNt2i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f4952cb6256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 122660\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122660,"size_decoded":123368,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight4.015;Plau;MotivaSans-","md5":"d45f521dba72b19a4096691a165b1990","sha1":"2a08728fbb9229acccbf907efdf4091f9b9a232f","sha256":"6b7a3177485c193a2e80be6269b6b12880e695a8b4349f49fccf87f9205badcc","sha512":"9262847972a50f0cf8fc4225c6e9a72dbf2c55ccbcc2a098b7f1a5bd9ea87502f3c495a0431373a3c20961439d2dae4af1b1da5b9fade670d7fcaed486831d8c","ssdeep":"3072:XnN/O/ceJkGwg/MOAibD2hPfX4HYhDhudcvObkSafj9:9/O/ceJkGwg/MOAib6nX44NhIWOb8fh","tlshash":"70c32a46f712eb4adc554e3d6162a3d5b348f9f53b2f830ba2856e55fc8f0c90e46288","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-10-09T18:01:44.93358Z","times_seen":4192,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/1399ad157/ffc79/118f678.js?v=RuZY1Xmx","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sowmoscow.com/cc5a62cf5","date":"2026-10-09T18:00:43.304Z","timestamp":1791568843304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sowmoscow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 16:46:44 GMT","end":"Sun, 27 Dec 2026 16:46:43 GMT"},"fingerprint":{"sha1":"3D:53:78:1E:D7:E4:B5:A1:9D:AA:AA:29:4C:4C:65:4E:49:46:6B:8D","sha256":"5D:4B:49:1A:59:A4:4C:84:AE:D0:47:21:8E:AE:B0:B5:64:CC:8A:83:1B:99:16:1A:AE:9C:25:09:01:CC:AA:0C"}}},"request":{"raw":"GET /1399ad157/ffc79/118f678.js?v=RuZY1Xmx HTTP/1.1\r\nHost: sowmoscow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sowmoscow.com/cc5a62cf5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:43 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 09 Oct 2026 18:00:43 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VB0OkwBfiEXKTQI22J26z0YTWnhZxH9sbWer%2BrBmNjhZdsKr0ieOWeBsvxfcNqD60W91HhZrOQtKSRmnNuRqcK8T0lIAdjpVe0SKT5uNivyJ%2BQjdqNchDnnjCyNAJW1m\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47f4956afaeb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1377487,"size_decoded":486090,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65430), with no line terminators","md5":"c29076e38aa9f456e4f89ec04567cfe2","sha1":"474b2eec64cbed4f5d80b4ecf43508007b86b004","sha256":"b4c9df72cdc9b7dc7ca6acc27892994c435d3473e66c4a162f8b60a0bd3160ee","sha512":"7d97c1852438a0c8d10cea07b7ddf148f14dc819f91b3e804eaa6a97f3d76b70f172c780eccaf95cb080b05c4fa28f1712d732b8d9fae47781b5d44d058ae700","ssdeep":"24576:H8U5S1ZeR0JvmcxVBG/a4wuEOWKOV358nu:H8Ug","tlshash":"b325ea567e0f9d324033292e6d59347bb13cd5a35e5bf1b4e787ad0ae92fdc28488860","first_seen":"2026-10-09T18:01:44.934838Z","last_seen":"2026-10-09T18:01:44.934838Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":1949,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/1399ad157/ffc79/58840a3.jpg","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sowmoscow.com/cc5a62cf5","date":"2026-10-09T18:00:47.282Z","timestamp":1791568847282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sowmoscow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 16:46:44 GMT","end":"Sun, 27 Dec 2026 16:46:43 GMT"},"fingerprint":{"sha1":"3D:53:78:1E:D7:E4:B5:A1:9D:AA:AA:29:4C:4C:65:4E:49:46:6B:8D","sha256":"5D:4B:49:1A:59:A4:4C:84:AE:D0:47:21:8E:AE:B0:B5:64:CC:8A:83:1B:99:16:1A:AE:9C:25:09:01:CC:AA:0C"}}},"request":{"raw":"GET /1399ad157/ffc79/58840a3.jpg HTTP/1.1\r\nHost: sowmoscow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sowmoscow.com/1399ad157/ffc79/5628c0e.css?v=RuZY1Xmx\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:47 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fODWlGBDe0Ejt%2FjCFBBitpx6%2BzzyzDweUi8mDImPDtAkS%2FH6xTRTU9kg6sMfwJgH3SPCkk4TlMLr3X7RwulzX7SBJQ%2BQHbt930hBYsI6I0ZrivrNh2PbaeTD7ctQLPZe\"}]}\r\npriority: u=4,i\r\nlast-modified: Fri, 09 Oct 2026 18:00:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f496f8cdab509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21279,"size_decoded":21900,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 700x650, components 3","md5":"a94d87659e0714f51e9cedfc7f9884b3","sha1":"e5a17d774a9b2f1d8c602a8b9e2b03f4c9ab78c1","sha256":"496295711815bbb7bf2b7325b88addbda8f6aaba1bf66128a091285c4cee4f96","sha512":"4a484798ce94df7240311b7e04db65f09df09a4161e58fdfa1c302bce8c86dfe6027220bb48211adb46c0be14aad94987551bf3bf7048c80917568331fbb1af6","ssdeep":"384:S08KwAhxW2Xqg33MJXcyXzK6NSxlUz0ABvFIs6udknvoxDMl4:S0VwCqIhuNSxdkLdkvodd","tlshash":"21a24970f3c3d744ab232bac643c7d335bba20d4a1d81a9b46676c219205f79e51ba3d","first_seen":"2026-10-09T18:01:44.936674Z","last_seen":"2026-10-09T18:01:44.936674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamusercontent.com/ugc/2324488744551341192/6475278252B57B6F42A9D6829600F9B4CD86E2F5/?imw=100\u0026imh=56\u0026ima=fit\u0026impolicy=Letterbox\u0026imcolor=%23000000\u0026letterbox=true","fqdn":"images.steamusercontent.com","domain":"steamusercontent.com","tld":"com"},"ip":{"addr":"23.36.76.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.608Z","timestamp":1791568842608,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.akamai.steamusercontent.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 15:27:02 GMT","end":"Thu, 07 Jan 2027 15:27:01 GMT"},"fingerprint":{"sha1":"1E:9B:96:89:3E:03:79:C4:66:5A:85:05:4E:AA:87:29:54:12:C8:23","sha256":"63:B5:2A:C0:FE:ED:7D:91:BF:56:8B:A3:B7:6F:56:9A:88:43:C8:05:28:78:43:06:D8:08:15:5E:97:46:E0:02"}}},"request":{"raw":"GET /ugc/2324488744551341192/6475278252B57B6F42A9D6829600F9B4CD86E2F5/?imw=100\u0026imh=56\u0026ima=fit\u0026impolicy=Letterbox\u0026imcolor=%23000000\u0026letterbox=true HTTP/1.1\r\nHost: images.steamusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 21 Jun 2026 01:40:26 GMT\r\nAccess-Control-Expose-Headers: origin\r\nETag: \"e27f10461742aa619ec1707586da3582\"\r\nServer: Akamai Image Manager\r\nContent-Length: 3556\r\nContent-Type: image/jpeg\r\nCache-Control: private, no-transform, max-age=1133\r\nExpires: Fri, 09 Oct 2026 18:19:35 GMT\r\nDate: Fri, 09 Oct 2026 18:00:42 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3556,"size_decoded":3965,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 100x56, components 3","md5":"be2369ea5875e58899a46a1ef2c20dd1","sha1":"e47720f56d8e502d831e69adb566af3ef8112a27","sha256":"47ea1f18185880138e8244957825195bf68a044c416185bfbbfc3ca000406efa","sha512":"8706a25886fc88df47a759d5baa8f590fad04b5aff48ae65e170e3a2a76f5133e00129a2091343456d2f2e8bb859c367f5124b7a34538d1756306a5c2b9b0f93","ssdeep":"","tlshash":"f0714e48178379bdd434d17709fd9e206889bf025a67efaa0172bc4140343e7d99cd1e","first_seen":"2026-10-02T02:33:52.74978Z","last_seen":"2026-10-09T18:01:44.937967Z","times_seen":14,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":1,"connect":3,"send":0,"wait":3,"receive":0,"ssl":226},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.fastly.steamstatic.com/4e9e9bd375c442c17787795caa1602c2057d5740_medium.jpg","fqdn":"avatars.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.589Z","timestamp":1791568842589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:12:50 GMT","end":"Wed, 18 Nov 2026 06:12:49 GMT"},"fingerprint":{"sha1":"F7:B7:EC:30:15:85:8E:0C:D2:C1:E1:E6:13:0F:50:7F:10:DB:B3:BB","sha256":"B3:0D:07:72:5D:93:9D:92:7C:FD:0A:A5:C6:EF:E8:3F:3D:9B:C7:3A:60:CE:2F:5A:DC:34:1E:49:7B:1D:82:54"}}},"request":{"raw":"GET /4e9e9bd375c442c17787795caa1602c2057d5740_medium.jpg HTTP/1.1\r\nHost: avatars.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AP6rU80j5PqkeJeb1vEGLsuuQtwKNKzCyZFS0wNYUTW8tIH--IFh6Kjet2oVQU0TcP224fHCRx5d_HY\r\nlast-modified: Sat, 28 Mar 2026 17:02:47 GMT\r\netag: \"24b6eefead1146a181d7adaf0e8198cb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 736733\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270057-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1791568843.957102,VS0,VE2\r\ncontent-length: 2679\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2679,"size_decoded":3286,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 64x64, components 3","md5":"24b6eefead1146a181d7adaf0e8198cb","sha1":"1ab5f62a1fa84bfb2c8123347b19c4a83caf4af7","sha256":"05d63971db6ceef27520e2924ccc102249ea64096664a7e168c95441a12bbb33","sha512":"6d0fd99163484ba7fb9f731fa2e42a34e1b48ff1b97148eff45b23a3b8adfbac78211bc7df3180d7ca7e99f2840a48fa39536f6bd43223bf04febb1f5abb3845","ssdeep":"","tlshash":"b8516c4a4b459fc1f92456b25c32ff28dbd0ea10e07082e938e4121c78593f7e884044","first_seen":"2026-10-02T02:33:52.838323Z","last_seen":"2026-10-09T18:01:44.938815Z","times_seen":14,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":1,"connect":10,"send":0,"wait":48,"receive":2,"ssl":301},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.fastly.steamstatic.com/548640dcd48732226cb54913ac7de31d4582a35b.jpg","fqdn":"avatars.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.623Z","timestamp":1791568842623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:12:50 GMT","end":"Wed, 18 Nov 2026 06:12:49 GMT"},"fingerprint":{"sha1":"F7:B7:EC:30:15:85:8E:0C:D2:C1:E1:E6:13:0F:50:7F:10:DB:B3:BB","sha256":"B3:0D:07:72:5D:93:9D:92:7C:FD:0A:A5:C6:EF:E8:3F:3D:9B:C7:3A:60:CE:2F:5A:DC:34:1E:49:7B:1D:82:54"}}},"request":{"raw":"GET /548640dcd48732226cb54913ac7de31d4582a35b.jpg HTTP/1.1\r\nHost: avatars.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AP6rU82wQst8lXfWXcR2CdECPel9yZXXTZpmrsjXk9ANH4KAggCa5dmHyAW8GIrOIDxr9lNS0s4uGbo\r\nlast-modified: Mon, 09 Oct 2023 00:39:18 GMT\r\netag: \"98d02c2a2bbb8f5f6506ef6343d706f3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1351297\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270057-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1791568843.948535,VS0,VE1\r\ncontent-length: 1145\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1145,"size_decoded":1753,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 32x32, components 3","md5":"98d02c2a2bbb8f5f6506ef6343d706f3","sha1":"548640dcd48732226cb54913ac7de31d4582a35b","sha256":"f14cdea5d0d81edd120842ee25b11641154513ce48a5db9825969279a1c36324","sha512":"6b060ecb5af7449d0e72f365fbd2f603f145e507caeede5b234d9546f276b8be53669964145ce99b37e0051a9d72a5e7f111111648749f193d8d5ed64ab88569","ssdeep":"","tlshash":"6621b62b4d0ad7c6f7032476a7d91f283bef0e840605cad335ce9b10d8531a52b61228","first_seen":"2026-10-02T02:33:52.845626Z","last_seen":"2026-10-09T18:01:44.940433Z","times_seen":14,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":271,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.fastly.steamstatic.com/1c9b3144d54c336f2088ff04d5b93c89ebe88cb8.jpg","fqdn":"avatars.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.626Z","timestamp":1791568842626,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:12:50 GMT","end":"Wed, 18 Nov 2026 06:12:49 GMT"},"fingerprint":{"sha1":"F7:B7:EC:30:15:85:8E:0C:D2:C1:E1:E6:13:0F:50:7F:10:DB:B3:BB","sha256":"B3:0D:07:72:5D:93:9D:92:7C:FD:0A:A5:C6:EF:E8:3F:3D:9B:C7:3A:60:CE:2F:5A:DC:34:1E:49:7B:1D:82:54"}}},"request":{"raw":"GET /1c9b3144d54c336f2088ff04d5b93c89ebe88cb8.jpg HTTP/1.1\r\nHost: avatars.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: VSXFsCGgEfgxYjBhe4mbuw==\r\nlast-modified: Sun, 18 Feb 2024 19:48:15 GMT\r\netag: \"0x8DC30BA8C48BD7E\"\r\nx-ms-access-tier: Cold\r\nx-ms-access-tier-change-time: Sat, 13 Sep 2025 07:32:39 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 118323\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270057-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1791568843.949814,VS0,VE1\r\ncontent-length: 979\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":979,"size_decoded":1591,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3","md5":"5525c5b021a011f8316230617b899bbb","sha1":"1c9b3144d54c336f2088ff04d5b93c89ebe88cb8","sha256":"06eff34acccdbd8c228443efa64e63a8c6073f7404df0209bbb584206d285944","sha512":"fd23864af9b7e43084221564b68f38fbfef21dc5b6f24b7bde8ec9dbf9f0211f6f135a824de6b38198beac2d2665bcb70b0c1b504f023e80ac251fea41175704","ssdeep":"","tlshash":"2611842a63c618dcf73005b06092af39aac9ad40148e07cb90d7a850c87b76c7c90240","first_seen":"2026-10-02T02:33:52.765365Z","last_seen":"2026-10-09T18:01:44.943341Z","times_seen":14,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":271,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/1399ad157/ffc79/1c7b778.png","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sowmoscow.com/cc5a62cf5","date":"2026-10-09T18:00:43.326Z","timestamp":1791568843326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sowmoscow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 16:46:44 GMT","end":"Sun, 27 Dec 2026 16:46:43 GMT"},"fingerprint":{"sha1":"3D:53:78:1E:D7:E4:B5:A1:9D:AA:AA:29:4C:4C:65:4E:49:46:6B:8D","sha256":"5D:4B:49:1A:59:A4:4C:84:AE:D0:47:21:8E:AE:B0:B5:64:CC:8A:83:1B:99:16:1A:AE:9C:25:09:01:CC:AA:0C"}}},"request":{"raw":"GET /1399ad157/ffc79/1c7b778.png HTTP/1.1\r\nHost: sowmoscow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sowmoscow.com/cc5a62cf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:43 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UmLCw%2Fy7ctovP%2BfSNpBsa46i2yEi4RiQg4dSwz0CzERqil%2Fwcmas9niAhFcK0G6FZNbnzbvRaiq0heffRzL%2Bfcy45Jz787KmZDehu0SJ2Akp0NN%2BtHZsjfRGlGEkx2tP\"}]}\r\npriority: u=5,i\r\nlast-modified: Fri, 09 Oct 2026 18:00:43 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f4956cfbbb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":988,"size_decoded":1610,"mime_type":"image/png","magic":"PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced","md5":"90796bf2f8c660ea94d84a75fb88e9ad","sha1":"9c8361c868c5f152359a8cbc98d452b71a2c15ee","sha256":"8200e01a40486e5ec85b1e000aa229b83421eb9f0a9c576df00a23eadc56dfaf","sha512":"ec97a47afb0ca53b08adb43fe215f567e0e4b1f19e177b4aa0b39bd460c8646a866f81ed457631480dbb7c4d9020e7adb2b0fc2d37f8b91457e0a45856e0ee1a","ssdeep":"","tlshash":"2311c4a4a8f7020964b580e49de99b28edb22836235ae920d22c2f1ac55634ce042a13","first_seen":"2025-10-29T20:02:16.119374Z","last_seen":"2026-10-09T18:01:44.944472Z","times_seen":8,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/1399ad157/ffc79/bce0c55.ttf","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sowmoscow.com/cc5a62cf5","date":"2026-10-09T18:00:47.323Z","timestamp":1791568847323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sowmoscow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 16:46:44 GMT","end":"Sun, 27 Dec 2026 16:46:43 GMT"},"fingerprint":{"sha1":"3D:53:78:1E:D7:E4:B5:A1:9D:AA:AA:29:4C:4C:65:4E:49:46:6B:8D","sha256":"5D:4B:49:1A:59:A4:4C:84:AE:D0:47:21:8E:AE:B0:B5:64:CC:8A:83:1B:99:16:1A:AE:9C:25:09:01:CC:AA:0C"}}},"request":{"raw":"GET /1399ad157/ffc79/bce0c55.ttf HTTP/1.1\r\nHost: sowmoscow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sowmoscow.com/1399ad157/ffc79/5628c0e.css?v=RuZY1Xmx\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:47 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LK43zqZSGOPGPsAtUCUDXH8yT7oTQAqUXR3yz0DTOOtwcQF%2F%2BxgPYWrG834%2F9ZcTs1vz%2FgPMdbfkaJknE6iQS0X9baBySZFQ8EdtGxcBT2vlN2jFUrVjAUtjr%2BtXsl6O\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 09 Oct 2026 18:00:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f496fccf0b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124048,"size_decoded":124688,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaSans","md5":"2d64caa5ecbf5e42cbb766ca4d85e90e","sha1":"147420abceb4a7fd7e486dddcfe68cda7ebb3a18","sha256":"045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f","sha512":"c96556ec57dac504919e806c7df536c4f86892b8525739289b2f2dbbf475de883a4824069dbdd4bb1770dd484f321563a00892e6c79d48818a4b95406bf1af96","ssdeep":"1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9","tlshash":"86c35c06f706d709dd240e3df9a1a3a9b358f8a57b1fcb0fa6856d65fc8e0852a441cc","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-10-09T18:01:44.946538Z","times_seen":7242,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/1399ad157/ffc79/e93a075.ttf","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sowmoscow.com/cc5a62cf5","date":"2026-10-09T18:00:47.326Z","timestamp":1791568847326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sowmoscow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 16:46:44 GMT","end":"Sun, 27 Dec 2026 16:46:43 GMT"},"fingerprint":{"sha1":"3D:53:78:1E:D7:E4:B5:A1:9D:AA:AA:29:4C:4C:65:4E:49:46:6B:8D","sha256":"5D:4B:49:1A:59:A4:4C:84:AE:D0:47:21:8E:AE:B0:B5:64:CC:8A:83:1B:99:16:1A:AE:9C:25:09:01:CC:AA:0C"}}},"request":{"raw":"GET /1399ad157/ffc79/e93a075.ttf HTTP/1.1\r\nHost: sowmoscow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sowmoscow.com/1399ad157/ffc79/5628c0e.css?v=RuZY1Xmx\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:47 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UWDWOEYz2i0%2F0%2FzR%2BDoEcws9lQymI7i16vQGNsmyUqN4nnDQJo9nuR4eZ%2BC%2Fir%2FRtwqzdGPC%2F9dB5FrM7ogrxMAk%2F%2FskGgI83DBgVLBiViGvo0ZzlhQgi0mOD9fuyq7d\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 09 Oct 2026 18:00:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f496fccf2b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118736,"size_decoded":119384,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansThin4.015;Plau;MotivaSans-T","md5":"ce6bda6643b662a41b9fb570bdf72f83","sha1":"87bcf1d2820b476aaeaea91dc7f6dbedd73c1cb8","sha256":"0adf4d5edbc82d28879fdfaaf7274ba05162ff8cbbda816d69ed52f1dae547f6","sha512":"8023da9f9619d34d4e5f7c819a96356485f73fddcb8adb452f3ceefa8c969c16ca78a8c8d02d8e7a213eb9c5bbe5c50745ba7602e0ee2fe36d2742fb3e979c86","ssdeep":"1536:GAAAAAAAgsAAAYgIAAAAsAuErzzzz6mfzzVCA9zzzzzzdp/koLAGXImE98YfgNi9:kErZDE9BfgNiX9k3SDHewStfNwS0fj9","tlshash":"b5c34b06f702eb4add691e7ca59163c5b728f4a13b1ec30f95c66d5afc8e1a60d022c9","first_seen":"2023-04-05T04:16:14Z","last_seen":"2026-10-09T18:01:44.95277Z","times_seen":5054,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":390,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.fastly.steamstatic.com/88a4ebfa1c99eff16af2d0f3536e535c80072af4_medium.jpg","fqdn":"avatars.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.585Z","timestamp":1791568842585,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:12:50 GMT","end":"Wed, 18 Nov 2026 06:12:49 GMT"},"fingerprint":{"sha1":"F7:B7:EC:30:15:85:8E:0C:D2:C1:E1:E6:13:0F:50:7F:10:DB:B3:BB","sha256":"B3:0D:07:72:5D:93:9D:92:7C:FD:0A:A5:C6:EF:E8:3F:3D:9B:C7:3A:60:CE:2F:5A:DC:34:1E:49:7B:1D:82:54"}}},"request":{"raw":"GET /88a4ebfa1c99eff16af2d0f3536e535c80072af4_medium.jpg HTTP/1.1\r\nHost: avatars.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: y9RGOChUKAuXdg6NGTFCOA==\r\nlast-modified: Wed, 16 Mar 2022 19:05:01 GMT\r\netag: \"0x8DA077FDF0650C6\"\r\nx-ms-access-tier: Cold\r\nx-ms-access-tier-change-time: Fri, 12 Sep 2025 16:35:16 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 1571592\r\nx-served-by: cache-bma-essb1270057-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 972\r\nx-timer: S1791568843.947965,VS0,VE0\r\ncontent-length: 981\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":981,"size_decoded":1596,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, baseline, precision 8, 64x64, components 3","md5":"cbd446382854280b97760e8d19314238","sha1":"52de9e1d00d54ee79d88023573c9e7a5f5d5ce16","sha256":"beb1b7a52d73db1c7550756c1225cb3875db3fecabd51370b309a8335f49b712","sha512":"c6d108decd26a07f6938c6c3603e838f6e505fa2ac9b62193d93ff721befd9b211098264c585363a249633c2c0a44c05964dcbd4ff4dd4a6cd2d81924c0d2ba4","ssdeep":"","tlshash":"db11b3201fe773d4fd91ac3022302f16c7cc4fa2a1f74de6acd654c9e1c2e118968980","first_seen":"2023-08-25T10:07:32Z","last_seen":"2026-10-09T18:01:44.954195Z","times_seen":18,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":304,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/community_assets/images/items/625940/47a375eb53ea8bce48bef63e98011a60e7971b33.png","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.611Z","timestamp":1791568842611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:03:00 GMT","end":"Mon, 21 Dec 2026 11:02:59 GMT"},"fingerprint":{"sha1":"35:27:95:F1:7A:87:90:C8:D5:F1:A9:04:B3:07:6D:A6:FD:D3:2C:C7","sha256":"D8:4F:7F:70:8F:7A:7E:8B:84:AD:3C:28:69:F1:A7:43:EA:B9:82:9E:88:6C:DF:63:E3:60:FB:48:13:0F:C3:63"}}},"request":{"raw":"GET /community_assets/images/items/625940/47a375eb53ea8bce48bef63e98011a60e7971b33.png HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 May 2017 18:03:30 GMT\r\netag: \"591355f2-2044\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 720433\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270068-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1791568843.941857,VS0,VE2\r\ncontent-length: 8260\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":8260,"size_decoded":8744,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"b18121ae8a2eaa478580e82196385eb8","sha1":"47a375eb53ea8bce48bef63e98011a60e7971b33","sha256":"f130339a3e23ac8e4d4d55ac7d57a13884668474813d29473f1e51dc0554bc47","sha512":"944fa23bc9940c73176274fd9d5ca358b60b355c47fcbc40038239288fbeb548a4163ef7a6873958ef699c0c4b7a5e717d9359ca58393a29735bd4ee20a5bdeb","ssdeep":"96:CunGhLI736xxbxhS9WbA9vNUHcwEBoy//wd9TJStnWcPfKcc6dl8Pv4yJ23ok2rd:CuZIU+016c0atnWTSlMuok5SU1TKPv","tlshash":"2702c03ebbb1ceb9bcf85982e45e9cd064bcd88a4a8adce573031c0fdd6486c8140547","first_seen":"2026-10-02T02:33:52.751882Z","last_seen":"2026-10-09T18:01:44.956239Z","times_seen":14,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":1,"connect":11,"send":0,"wait":15,"receive":0,"ssl":293},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/community_assets/images/items/601590/80da60991523cfa968f1c411cbec759d9a39a9e1.png","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.616Z","timestamp":1791568842616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:03:00 GMT","end":"Mon, 21 Dec 2026 11:02:59 GMT"},"fingerprint":{"sha1":"35:27:95:F1:7A:87:90:C8:D5:F1:A9:04:B3:07:6D:A6:FD:D3:2C:C7","sha256":"D8:4F:7F:70:8F:7A:7E:8B:84:AD:3C:28:69:F1:A7:43:EA:B9:82:9E:88:6C:DF:63:E3:60:FB:48:13:0F:C3:63"}}},"request":{"raw":"GET /community_assets/images/items/601590/80da60991523cfa968f1c411cbec759d9a39a9e1.png HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Nov 2022 06:15:31 GMT\r\netag: \"63635c83-3b65\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1351297\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270068-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1791568843.663490,VS0,VE1\r\ncontent-length: 15205\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":15205,"size_decoded":15691,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"ba3b0e251f59db9b8d7b9b3a7e0da2a9","sha1":"80da60991523cfa968f1c411cbec759d9a39a9e1","sha256":"005bd6ac6996439a0e9f61dd0d3b546748792f797babdca1ff9d7c54fc88ecba","sha512":"b0c565a5a3d5bbe3e2443a6f2328cba38eb6eab09ee404acc98c532c471ee7919fe6ffee0ea7e6211041fa997aaaef091df33498949432bb08a9c22a75075bfa","ssdeep":"384:vfpQFRYGOu+J3W76sNPugQVc2qO9J7lS9Qr3Krnq:pQFRkYPugGqS9Jgnq","tlshash":"ac62c114fd0695d2755cc807b4f48d1b57f698674a90ce7dd4060f280be49c39bb65ca","first_seen":"2026-10-02T02:33:52.833052Z","last_seen":"2026-10-09T18:01:44.956981Z","times_seen":14,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/1399ad157/ffc79/3c6aae8.png","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sowmoscow.com/cc5a62cf5","date":"2026-10-09T18:00:43.307Z","timestamp":1791568843307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sowmoscow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 16:46:44 GMT","end":"Sun, 27 Dec 2026 16:46:43 GMT"},"fingerprint":{"sha1":"3D:53:78:1E:D7:E4:B5:A1:9D:AA:AA:29:4C:4C:65:4E:49:46:6B:8D","sha256":"5D:4B:49:1A:59:A4:4C:84:AE:D0:47:21:8E:AE:B0:B5:64:CC:8A:83:1B:99:16:1A:AE:9C:25:09:01:CC:AA:0C"}}},"request":{"raw":"GET /1399ad157/ffc79/3c6aae8.png HTTP/1.1\r\nHost: sowmoscow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sowmoscow.com/cc5a62cf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:43 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=syegn7fFw3T4AEzN6JPl5HW%2FlWWOOT0%2FshKqau2MbbIMqSOJL%2BLMFVdUWYmggllT9S%2BSHa%2F3yUzx4PcAZvO1W7LcJICgWqHFi5ksqFc3TjQCPf7L%2FFQtKp%2FuQXKcYyWc\"}]}\r\npriority: u=5,i\r\nlast-modified: Fri, 09 Oct 2026 18:00:43 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f4956afb1b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3871,"size_decoded":4497,"mime_type":"image/png","magic":"PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced","md5":"757579cf3f3a8a39ce364142e83c65a9","sha1":"321039f229a65e55f8a3ecc0a185eed8d5ea1214","sha256":"fd965406c48f5e474f60e0fbfc1b073ca58a1cec4bf62b90cc50ed5719c06b1f","sha512":"433ebcf9a918ec6e8eff105ba78b83b91b87fa0794ea9ad1b2d76f5a0b2b6393ac36cbabd0f7ebf0bb58f616ba27ff983b0e4cecb9da85e214a4829ee7ae80e3","ssdeep":"","tlshash":"af8129706ade7be185390e0b08b8ce92b8866cb38428619b8cbcdd54a5cf131c42f14f","first_seen":"2023-11-28T09:29:00Z","last_seen":"2026-10-09T18:01:44.964913Z","times_seen":3,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/1399ad157/ffc79/bbd6dc9.ttf","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sowmoscow.com/cc5a62cf5","date":"2026-10-09T18:00:47.318Z","timestamp":1791568847318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sowmoscow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 16:46:44 GMT","end":"Sun, 27 Dec 2026 16:46:43 GMT"},"fingerprint":{"sha1":"3D:53:78:1E:D7:E4:B5:A1:9D:AA:AA:29:4C:4C:65:4E:49:46:6B:8D","sha256":"5D:4B:49:1A:59:A4:4C:84:AE:D0:47:21:8E:AE:B0:B5:64:CC:8A:83:1B:99:16:1A:AE:9C:25:09:01:CC:AA:0C"}}},"request":{"raw":"GET /1399ad157/ffc79/bbd6dc9.ttf HTTP/1.1\r\nHost: sowmoscow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sowmoscow.com/1399ad157/ffc79/5628c0e.css?v=RuZY1Xmx\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:47 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fuyGsEU%2BfMy9Nyb3BdaPi5G6uPco6JDvo3D93wgl8fKVh643sQlFzvL8tQJqsXg955cvnCbM0JVCqhV%2FmbZ2Vycjtd7zuSB5WhOiAPFZdYMyJ%2F0FppsPfDrFT9FxWRl6\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 09 Oct 2026 18:00:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f496fbcebb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122684,"size_decoded":123320,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 22 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;MotivaSan","md5":"57613e143ff3dae10f282e84a066de28","sha1":"88756cc8c6db645b5f20aa17b14feefb4411c25f","sha256":"19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14","sha512":"94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176","ssdeep":"3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh","tlshash":"82c34b06f316e70aec614e3c66769399b358f8a53f2fcb0b95857d60bcad0d51e8128c","first_seen":"2023-04-05T04:16:14Z","last_seen":"2026-10-09T18:01:44.966929Z","times_seen":7486,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/images/logo_steam.svg?v=8","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.541Z","timestamp":1791568842541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/images/logo_steam.svg?v=8 HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 22 Sep 2026 19:38:53 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9NdtLF8FoEmfixLxsiK8qR7IFyzF7si71gz7alHPHsZUi0b0n6ib15I0tKKPrMAarQ1pKaO4ombFYiJsNtY9S3qCBJf3iZsXgModhED9a8NUdIqkycVbTfWRa6iwqSlN\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: \"6ab2d94d-e3e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f4951db1356ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3646,"size_decoded":2420,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31aabe1e01f27b3b9b47d7265807afc2","sha1":"a430f5a8a81145215c41c3ba80929627e570d81e","sha256":"3a4d08139646d567a612f75b8179641c570d490f8013478d131266ed21f3d453","sha512":"60dfb140295124b3f6b57592504ca6006c22988bba82bf63c5559fa7f8da2aab7e163265abb2a312034875f95fa850bbacb620ecca6c56ea8e79689963cd31c4","ssdeep":"","tlshash":"f971b4cc17338be06595c27e1e7476d223b365a9e8b001e8a3920c202c0bfe69a64d75","first_seen":"2023-10-31T01:09:47Z","last_seen":"2026-10-09T18:01:44.967702Z","times_seen":3045,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/profile/profile_action_dropdown.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.565Z","timestamp":1791568842565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/profile/profile_action_dropdown.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-411\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 23840\r\nx-served-by: cache-bma-essb1270034-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1350\r\nx-timer: S1791568843.661729,VS0,VE0\r\ncontent-length: 1041\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1041,"size_decoded":1444,"mime_type":"image/png","magic":"PNG image data, 12 x 8, 8-bit/color RGBA, non-interlaced","md5":"f7c7f00de9db4d93388c0836074ab2bd","sha1":"94ff6b8f6ec79de3ec2ec28ab13205870b63d2f4","sha256":"75511559130d0525f23dab49d6fd331727b3911a52e54bd95d4db76b79df980a","sha512":"8a17f7cd6cedfdfcea30205afddcdfb53ed46243dfbb8ef4fbdc90ab91c3b98701552831ec791a1e6b3f8cd880779dd27ffb84b89faab3ff59f3d83955b43990","ssdeep":"","tlshash":"0a1175cdef40b901a069e75118e35407bd2604d4e5e2e0627a89cd03a8742b28809aef","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-10-09T18:01:44.968573Z","times_seen":557,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamusercontent.com/ugc/2268193115367490020/BB03FFDD9220A111EE07D5B0D65D015D7C1125E2/?imw=100\u0026ima=fit\u0026impolicy=Letterbox\u0026imcolor=%23000000\u0026letterbox=false","fqdn":"images.steamusercontent.com","domain":"steamusercontent.com","tld":"com"},"ip":{"addr":"23.36.76.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.596Z","timestamp":1791568842596,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.akamai.steamusercontent.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 15:27:02 GMT","end":"Thu, 07 Jan 2027 15:27:01 GMT"},"fingerprint":{"sha1":"1E:9B:96:89:3E:03:79:C4:66:5A:85:05:4E:AA:87:29:54:12:C8:23","sha256":"63:B5:2A:C0:FE:ED:7D:91:BF:56:8B:A3:B7:6F:56:9A:88:43:C8:05:28:78:43:06:D8:08:15:5E:97:46:E0:02"}}},"request":{"raw":"GET /ugc/2268193115367490020/BB03FFDD9220A111EE07D5B0D65D015D7C1125E2/?imw=100\u0026ima=fit\u0026impolicy=Letterbox\u0026imcolor=%23000000\u0026letterbox=false HTTP/1.1\r\nHost: images.steamusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 16 Sep 2026 10:22:08 GMT\r\nAccess-Control-Expose-Headers: x-goog-content-length-range\r\nETag: \"7200d07551e44b52561e2ec3da147a76\"\r\nServer: Akamai Image Manager\r\nContent-Length: 987099\r\nContent-Type: image/gif\r\nCache-Control: private, no-transform, max-age=485\r\nExpires: Fri, 09 Oct 2026 18:08:47 GMT\r\nDate: Fri, 09 Oct 2026 18:00:42 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":987099,"size_decoded":987529,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 928","md5":"a6c8c30e0eb620c35101b18633c799f1","sha1":"38b374064b1c5888d57d1a8fcd68b45fda1d0f1a","sha256":"5fdc1c2c742d84fd8c0d1238358d710504444c3bd479980cbb39ac9e986046ec","sha512":"f3dbebfb9d21c9200f9e38dcd5373c856b86a224f9780e60aadaa79b4237f433ecb57e5627314aa50049096cc905b455553facc6590b0cd8190fd44deaf205e7","ssdeep":"24576:5TxVDJagi69PkCAaXdgCju9asR0ryBxnCnhD:5lTagtVLXdFu9CsVCnhD","tlshash":"c525334ef126283ff6bda8659976e2b074e89811d30ee74843dc11a0dc5fd1fa8e8971","first_seen":"2026-10-02T02:33:52.738271Z","last_seen":"2026-10-09T18:01:44.969217Z","times_seen":14,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":1,"connect":3,"send":0,"wait":10,"receive":55,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/store_item_assets/steam/apps/440/capsule_184x69.jpg?t=1757348372","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.622Z","timestamp":1791568842622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:03:00 GMT","end":"Mon, 21 Dec 2026 11:02:59 GMT"},"fingerprint":{"sha1":"35:27:95:F1:7A:87:90:C8:D5:F1:A9:04:B3:07:6D:A6:FD:D3:2C:C7","sha256":"D8:4F:7F:70:8F:7A:7E:8B:84:AD:3C:28:69:F1:A7:43:EA:B9:82:9E:88:6C:DF:63:E3:60:FB:48:13:0F:C3:63"}}},"request":{"raw":"GET /store_item_assets/steam/apps/440/capsule_184x69.jpg?t=1757348372 HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 23 Feb 2018 23:46:48 GMT\r\netag: \"5a90a7e8-7470\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 1773501\r\nx-served-by: cache-bma-essb1270068-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 5432\r\nx-timer: S1791568843.663945,VS0,VE0\r\ncontent-length: 29808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29808,"size_decoded":30298,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=105, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=280], baseline, precision 8, 184x69, components 3","md5":"442dd4aaab26f75008e6ef3222ba3f31","sha1":"1094687122fd6a069c96d6982309b2f4136e8284","sha256":"42f58582fea5fd419b6c0a4130e804e5b24cefa0d859be3e88e70aee4afc6bc6","sha512":"9cf3c17a439d7e2e4c4b8c5f28cba5a27eec46b8427e32aec716e060e861186c1321b05b5031934451efa35d44d6f9708c390d2fe0ba52dcc14e6a9793bf89d1","ssdeep":"768:Z7VMMOQQVMMOQQ2zomYRwjKaCzhgFBavaQi:fFpwFpvzqWjKaCzhQB0i","tlshash":"77d2bf673780de61faf50a3965c5cbe29782f941e9e702d334ee2509bf357621c14386","first_seen":"2023-05-19T03:12:31Z","last_seen":"2026-10-09T18:01:44.969996Z","times_seen":48,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/1399ad157/ffc79/2d34609.png","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sowmoscow.com/cc5a62cf5","date":"2026-10-09T18:00:43.306Z","timestamp":1791568843306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sowmoscow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 16:46:44 GMT","end":"Sun, 27 Dec 2026 16:46:43 GMT"},"fingerprint":{"sha1":"3D:53:78:1E:D7:E4:B5:A1:9D:AA:AA:29:4C:4C:65:4E:49:46:6B:8D","sha256":"5D:4B:49:1A:59:A4:4C:84:AE:D0:47:21:8E:AE:B0:B5:64:CC:8A:83:1B:99:16:1A:AE:9C:25:09:01:CC:AA:0C"}}},"request":{"raw":"GET /1399ad157/ffc79/2d34609.png HTTP/1.1\r\nHost: sowmoscow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sowmoscow.com/cc5a62cf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:43 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zJxZje2NxuWSSon49UOcDVK3CGv76b5y6YxF%2BkaHbUeBhfK%2BSjWzWv30gdHDErpWKhYFpMmBj5mxQaTnAfeAfEDsM%2Fv9Hlyt3VUZA65Tt3ANhYzz8hca%2FY8%2F4hRCXN0S\"}]}\r\npriority: u=5,i\r\nlast-modified: Fri, 09 Oct 2026 18:00:43 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f4956afb0b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":975,"size_decoded":1597,"mime_type":"image/png","magic":"PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced","md5":"7b3cfe78773f9411382900d9ef2fef7c","sha1":"c1b8d88b385d53890215fcbf486d282a2902114a","sha256":"ed958fa96c03eb4e7f414a80ee61886bb434897796547b30638cfba941663b9b","sha512":"b1dc1e3695f9a996bf40e01d3921463b1a859707eee113c29d7490d4b7285d6013bd069063fb47cbb55f0af1e119789d51287ddeab3d1d438f1837a055ec8da7","ssdeep":"","tlshash":"971108d3425c7d1b53475f2f8918e700800c903f8a9aa86220b1a4b008a12904aea3bb","first_seen":"2025-08-18T12:47:39.691702Z","last_seen":"2026-10-09T18:01:44.97106Z","times_seen":12,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/community_assets/images/items/552990/051d3f25f7e2b69ec609c2f67f3b13da994ed7ec.png","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.584Z","timestamp":1791568842584,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:03:00 GMT","end":"Mon, 21 Dec 2026 11:02:59 GMT"},"fingerprint":{"sha1":"35:27:95:F1:7A:87:90:C8:D5:F1:A9:04:B3:07:6D:A6:FD:D3:2C:C7","sha256":"D8:4F:7F:70:8F:7A:7E:8B:84:AD:3C:28:69:F1:A7:43:EA:B9:82:9E:88:6C:DF:63:E3:60:FB:48:13:0F:C3:63"}}},"request":{"raw":"GET /community_assets/images/items/552990/051d3f25f7e2b69ec609c2f67f3b13da994ed7ec.png HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 May 2023 16:04:28 GMT\r\netag: \"645bc08c-2fa3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 332902\r\nx-served-by: cache-bma-essb1270068-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 33\r\nx-timer: S1791568843.951017,VS0,VE0\r\ncontent-length: 12195\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12195,"size_decoded":12681,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"173d1be01813698e8fcffe1fb35b8049","sha1":"051d3f25f7e2b69ec609c2f67f3b13da994ed7ec","sha256":"9527714b77f9ff083e608f67c3d66b9350c3d10b8184f59a881e1b6a9c466cf1","sha512":"10c190943970eca827b69fa79a55d68c0ceee56156a2c7ff987e14645be592211b49e3496dbe2416f4574beea723a5d2846687681a28cbaa291453d4c0c808d7","ssdeep":"192:fIIHUCD4wa3S1JVoUMna9yUpW//FMfEYdAiNnGEa9YEityP9ctiALKts9ws9JV6a:h0wD1JVdSswC3dAikEa9YEV6wAe6FP6a","tlshash":"e242c002b4490e2c09461d94b7af2bb6dc19a7d613dc7e1c747df94e913b82a3c636e1","first_seen":"2024-08-19T18:03:36.745487Z","last_seen":"2026-10-09T18:01:44.974874Z","times_seen":25,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":1,"connect":11,"send":0,"wait":32,"receive":0,"ssl":291},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.fastly.steamstatic.com/e6cc3656507547eee1a9d8232887735e56f4bd85_medium.jpg","fqdn":"avatars.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.590Z","timestamp":1791568842590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:12:50 GMT","end":"Wed, 18 Nov 2026 06:12:49 GMT"},"fingerprint":{"sha1":"F7:B7:EC:30:15:85:8E:0C:D2:C1:E1:E6:13:0F:50:7F:10:DB:B3:BB","sha256":"B3:0D:07:72:5D:93:9D:92:7C:FD:0A:A5:C6:EF:E8:3F:3D:9B:C7:3A:60:CE:2F:5A:DC:34:1E:49:7B:1D:82:54"}}},"request":{"raw":"GET /e6cc3656507547eee1a9d8232887735e56f4bd85_medium.jpg HTTP/1.1\r\nHost: avatars.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AP6rU835yZtn2PZizLtOpJtzIEmXEwtxc7wqnLBiOf6i81Chc4j0hNwawRwxi6X9Ah6Vurgk\r\nlast-modified: Mon, 21 Mar 2022 18:06:03 GMT\r\netag: \"31708b24a0290cc88e5f3e47bf4c45ae\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1351297\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270057-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1791568843.957385,VS0,VE1\r\ncontent-length: 1902\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1902,"size_decoded":2503,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3","md5":"31708b24a0290cc88e5f3e47bf4c45ae","sha1":"8e3032d410364bdbcbfd3d738addcce28a8a4c79","sha256":"226741503cd8a6a5815e80d3843954955c8f8a75c2cc4309d9628fa69df202dd","sha512":"15cc5a273d1b0e796e1fafe050366b633bf657c822977da3b67b13638021c86f8c21bc2d686c898f078b0d9c5455841cbb7add425df1e7b1fc0366dd73fb7f1e","ssdeep":"","tlshash":"c441d51ba3472af1fdac0172c6f2fe245ad44e4224aae7d83ac42a25c1a2162bc44f11","first_seen":"2026-10-02T02:33:52.879528Z","last_seen":"2026-10-09T18:01:44.976445Z","times_seen":14,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":1,"connect":10,"send":0,"wait":48,"receive":7,"ssl":296},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/css/motiva_sans.css?v=8","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.236Z","timestamp":1791568842236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/css/motiva_sans.css?v=8 HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 22 Sep 2026 19:37:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XYLJj3oZMUd8hekfJVullFoSjdnhqdZVQLSiUmyh57KWtNf6qo75BAKqHF7%2B43%2BjE1V58LC39CdAo%2F8PFXMaqcS%2BNmn0trB5y6JAonxzBPkBvAuQxmKgdHixXf7FQdTE\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6ab2d8e1-85c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f494ffaae56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2140,"size_decoded":1292,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"085f956b8fff871eea292803338c5f44","sha1":"dfc4f5cb572e204daebef79876284048e666434b","sha256":"9d330a23d96091e6df549a92d26cbb46f5764cb12d9d7771c16eac08d3cea353","sha512":"94409cfefc7cea1284578d12f7970cb106004d6dbce492eaf429caa41fd739d495d5021d45f0911426d491ccd9b78b75ee0ddd388bd23f794978298f57b2d7cc","ssdeep":"","tlshash":"ab418044255db4378ba00c47f3fa2e058e5f3418621681aab4f51ba46fda879437079f","first_seen":"2026-06-26T02:14:11.715988Z","last_seen":"2026-10-09T18:01:44.978993Z","times_seen":36,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/css/globalv2.css?v=8","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.240Z","timestamp":1791568842240,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/css/globalv2.css?v=8 HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 22 Sep 2026 19:37:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NhP6T9mZUkFe5uv9NM2luLdAzZZdjbZQg6C6uijy8TrgH3nlAyWjbYovzgzUjSkXkhuCruoTE6AHtZzHWL4Aq4tCv5ra1JF70LW%2BLZRBN5uqcejBZ2IqsyXyu6qE%2BzuK\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6ab2d8dd-9ade\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f494ffab256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39646,"size_decoded":13472,"mime_type":"text/css","magic":"ASCII text, with very long lines (4009), with CRLF line terminators","md5":"873d87f45bc7f1361b6ede1fc5a66b67","sha1":"bbdeb71b79521302ccefcdbe6efa47f1abed7529","sha256":"52618cebd684ba82be7057d6e78cdca46f612de6c829db3fb307650fc65408ce","sha512":"441cde329a3ea5bedd5ecbd62292f00d2cc83467b232b095f241a259038cef1e1fb34b32e5a197c0c85ae986ff030f20aff3dd227911a49ca07f6d2bd0bb3aa6","ssdeep":"768:RmOZyrY6dKV7syaFVwoa5cBt45KqFUevSQNZKJb4Ud4xh5VgI0NC:6vkFM0o4Ud4xn","tlshash":"1d03c75cde96214e7327bd54fbb1ab115f2282725a0f46bef1e8611493c8a6c38327cd","first_seen":"2026-06-26T02:14:11.737396Z","last_seen":"2026-10-09T18:01:44.981154Z","times_seen":36,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.steamusercontent.com/ugc/2324488744551326489/5A5E37A7316E580F9E1CC0B8664346F02A4E1CDA/?imw=100\u0026imh=56\u0026ima=fit\u0026impolicy=Letterbox\u0026imcolor=%23000000\u0026letterbox=true","fqdn":"images.steamusercontent.com","domain":"steamusercontent.com","tld":"com"},"ip":{"addr":"23.36.76.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.599Z","timestamp":1791568842599,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.akamai.steamusercontent.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 15:27:02 GMT","end":"Thu, 07 Jan 2027 15:27:01 GMT"},"fingerprint":{"sha1":"1E:9B:96:89:3E:03:79:C4:66:5A:85:05:4E:AA:87:29:54:12:C8:23","sha256":"63:B5:2A:C0:FE:ED:7D:91:BF:56:8B:A3:B7:6F:56:9A:88:43:C8:05:28:78:43:06:D8:08:15:5E:97:46:E0:02"}}},"request":{"raw":"GET /ugc/2324488744551326489/5A5E37A7316E580F9E1CC0B8664346F02A4E1CDA/?imw=100\u0026imh=56\u0026ima=fit\u0026impolicy=Letterbox\u0026imcolor=%23000000\u0026letterbox=true HTTP/1.1\r\nHost: images.steamusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 12 Jun 2026 08:03:43 GMT\r\nAccess-Control-Expose-Headers: origin\r\nETag: \"bff7a6783a5d5b5dcb7521b7b8b2627b\"\r\nServer: Akamai Image Manager\r\nContent-Length: 3215\r\nContent-Type: image/jpeg\r\nCache-Control: private, no-transform, max-age=51943\r\nExpires: Sat, 10 Oct 2026 08:26:25 GMT\r\nDate: Fri, 09 Oct 2026 18:00:42 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3215,"size_decoded":3625,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x56, components 3","md5":"3045ae78b512d6f3bf12272489464b4d","sha1":"e4c462a60c55ec555dde42a5314a346088522d47","sha256":"5f4c9df31cdc4c924e17f8dc2c2adcac032269bedeb2c96c5e79d412193c2a02","sha512":"4def9ff37637a751039ee031cd233982f2e8674eaf1fea13defdfaee81a4561aecd3b3724a8d3437edbd54a015279b43acb9e37ec9c24cb9074a78fb7dbae317","ssdeep":"","tlshash":"b2616cc19350a5c1c5ad12be16dab211eb086803c7e9cf7f3180a05364798cba972da4","first_seen":"2026-10-02T02:33:52.807846Z","last_seen":"2026-10-09T18:01:44.983316Z","times_seen":14,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":117,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamusercontent.com/ugc/2324488744551346621/820F82FC481484956E944DB6CB7C72D8C28A2B00/?imw=100\u0026imh=56\u0026ima=fit\u0026impolicy=Letterbox\u0026imcolor=%23000000\u0026letterbox=true","fqdn":"images.steamusercontent.com","domain":"steamusercontent.com","tld":"com"},"ip":{"addr":"23.36.76.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.606Z","timestamp":1791568842606,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.akamai.steamusercontent.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 15:27:02 GMT","end":"Thu, 07 Jan 2027 15:27:01 GMT"},"fingerprint":{"sha1":"1E:9B:96:89:3E:03:79:C4:66:5A:85:05:4E:AA:87:29:54:12:C8:23","sha256":"63:B5:2A:C0:FE:ED:7D:91:BF:56:8B:A3:B7:6F:56:9A:88:43:C8:05:28:78:43:06:D8:08:15:5E:97:46:E0:02"}}},"request":{"raw":"GET /ugc/2324488744551346621/820F82FC481484956E944DB6CB7C72D8C28A2B00/?imw=100\u0026imh=56\u0026ima=fit\u0026impolicy=Letterbox\u0026imcolor=%23000000\u0026letterbox=true HTTP/1.1\r\nHost: images.steamusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 16 Jul 2026 11:02:52 GMT\r\nAccess-Control-Expose-Headers: origin\r\nETag: \"283de783166beff85c6122dda72f66c8\"\r\nServer: Akamai Image Manager\r\nContent-Length: 2596\r\nContent-Type: image/jpeg\r\nCache-Control: private, no-transform, max-age=425242\r\nExpires: Wed, 14 Oct 2026 16:08:04 GMT\r\nDate: Fri, 09 Oct 2026 18:00:42 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2596,"size_decoded":3007,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x56, components 3","md5":"ae1aaf2bd804dfd48568eaf63bb49f1a","sha1":"9b3fef7a8b92091930f49e45ee1dfcbe3eb23ada","sha256":"8e61d0f0b01ef0dc8c20bba6d5b6d24a4eeb49f93e20409bb730a777be5ac4aa","sha512":"31ff1bb775d251440b655c65ea63e423549ff43ab6b703a9e0677608286b9965aa974e42bd961d0981505f5f86184622e7beb5fae63c0c1d8e6244380fb57e6a","ssdeep":"","tlshash":"32514c636330001fdeb84834d6ed1b3a9f266d5827409fb32856c855c6266f240226cd","first_seen":"2026-10-02T02:33:52.763247Z","last_seen":"2026-10-09T18:01:44.984353Z","times_seen":14,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":1,"connect":3,"send":0,"wait":67,"receive":0,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/store_item_assets/steam/apps/730/942c04efaa5bc87afb6f2a97dbf17ac614c8a84d/capsule_184x69.jpg?t=1789251637","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.619Z","timestamp":1791568842619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:03:00 GMT","end":"Mon, 21 Dec 2026 11:02:59 GMT"},"fingerprint":{"sha1":"35:27:95:F1:7A:87:90:C8:D5:F1:A9:04:B3:07:6D:A6:FD:D3:2C:C7","sha256":"D8:4F:7F:70:8F:7A:7E:8B:84:AD:3C:28:69:F1:A7:43:EA:B9:82:9E:88:6C:DF:63:E3:60:FB:48:13:0F:C3:63"}}},"request":{"raw":"GET /store_item_assets/steam/apps/730/942c04efaa5bc87afb6f2a97dbf17ac614c8a84d/capsule_184x69.jpg?t=1789251637 HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AJjja9aN7qU6aRac75jLuPklzqZ7YNdjMwfrzN29z1LaOabq_2Q-F5_44fcrC8jpOnfHSZI2\r\nlast-modified: Tue, 02 Jun 2026 21:19:25 GMT\r\netag: \"927cdc52e350617f65ad6034bf2234bb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 1762202\r\nx-served-by: cache-bma-essb1270068-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 48833\r\nx-timer: S1791568843.662678,VS0,VE0\r\ncontent-length: 6607\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6607,"size_decoded":7212,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x69, components 3","md5":"927cdc52e350617f65ad6034bf2234bb","sha1":"4f9ce83ad1877aeb617f3708ff61010a24b00132","sha256":"a270d0db740b95cdae67b2b29196611c84d2a5859b88f0e67210fcf4525046eb","sha512":"3be076b3e9154d3e59db58f08024271896af80bba7f973d28ce1cfe4580562703ab3125c6c7653c8a44cdc12614a75e509f5696b95904054d12908e169002f01","ssdeep":"192:zpjzSLJ7k3o+67ESawXle8vw14hAEkivc:g7l/hfvg77","tlshash":"d3d18d6593f827eaf6250a715831fce042f3bdc96a7a494957db3b04208bad44ce4a98","first_seen":"2026-07-12T21:13:40.874429Z","last_seen":"2026-10-09T18:01:44.986386Z","times_seen":22,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/store_item_assets/steam/apps/1085660/953a00adc58cc0758102a5026dda6f2a76a5a6a1/capsule_184x69.jpg?t=1781815889","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.621Z","timestamp":1791568842621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:03:00 GMT","end":"Mon, 21 Dec 2026 11:02:59 GMT"},"fingerprint":{"sha1":"35:27:95:F1:7A:87:90:C8:D5:F1:A9:04:B3:07:6D:A6:FD:D3:2C:C7","sha256":"D8:4F:7F:70:8F:7A:7E:8B:84:AD:3C:28:69:F1:A7:43:EA:B9:82:9E:88:6C:DF:63:E3:60:FB:48:13:0F:C3:63"}}},"request":{"raw":"GET /store_item_assets/steam/apps/1085660/953a00adc58cc0758102a5026dda6f2a76a5a6a1/capsule_184x69.jpg?t=1781815889 HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: kZpjPs9HvA6KmAYLwldw2A==\r\nlast-modified: Tue, 26 May 2026 22:52:30 GMT\r\netag: \"0x8DEBB7977643087\"\r\nx-ms-access-tier: Hot\r\nx-ms-access-tier-inferred: true\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 1779495\r\nx-served-by: cache-bma-essb1270068-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 993\r\nx-timer: S1791568843.663876,VS0,VE0\r\ncontent-length: 4583\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4583,"size_decoded":5170,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 184x69, components 3","md5":"919a633ecf47bc0e8a98060bc25770d8","sha1":"426b6233943864174edc9db430f20c6334ab4b56","sha256":"7465d43f50a9c0aa13d771d2b398bf6e5f019faafaf4447516f21b02ffbe81e4","sha512":"7da622160716518c87c0f157517c4c6c9a49613ed948dafe165d8398643e795cc9ce7d86b99ce9c8828379347bf01c7a504115d26b257b402314685084a61a5b","ssdeep":"96:voGwKymauYjgONBYxFJpNYpr1/NZLrCK/hogtfRO+GI8N:MEYjNNBOFJHYzFxCKpNtNGI8N","tlshash":"e5917d0833a952effd5819ba39301c7eebd54a155170c3ac6ef82be98e51299c42c053","first_seen":"2026-10-02T02:33:52.931228Z","last_seen":"2026-10-09T18:01:44.987663Z","times_seen":14,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/1399ad157/ffc79/b2a4993.png","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sowmoscow.com/cc5a62cf5","date":"2026-10-09T18:00:43.308Z","timestamp":1791568843308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sowmoscow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 16:46:44 GMT","end":"Sun, 27 Dec 2026 16:46:43 GMT"},"fingerprint":{"sha1":"3D:53:78:1E:D7:E4:B5:A1:9D:AA:AA:29:4C:4C:65:4E:49:46:6B:8D","sha256":"5D:4B:49:1A:59:A4:4C:84:AE:D0:47:21:8E:AE:B0:B5:64:CC:8A:83:1B:99:16:1A:AE:9C:25:09:01:CC:AA:0C"}}},"request":{"raw":"GET /1399ad157/ffc79/b2a4993.png HTTP/1.1\r\nHost: sowmoscow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sowmoscow.com/cc5a62cf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:43 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nR3WleDzqyPZCFjrtIMG3n7aRWBPQFC3ihiZvIqM4zcJ9pHlM7PaGpK4uN7PYOwTt12pQl2ZndDRrjGw7RLwsYKcT88uHbHOlgdzT1SxcQolcn%2BBYryXlDEac9KsxkzM\"}]}\r\npriority: u=5,i\r\nlast-modified: Fri, 09 Oct 2026 18:00:43 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f4956afb3b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8552,"size_decoded":9166,"mime_type":"image/png","magic":"PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced","md5":"fd67cb7bbc8b269a3da874bd46a8194c","sha1":"cd4971306ee390ec0c8915950eb677debe12518a","sha256":"fe227b35c5ad0e7f785adc6e51a90ee961ad2606a9dac1db7f34429ffd3f4d41","sha512":"e7d128b0596b54d5fc5ac61894322a085645a03a965dbf74a5bb8a3a346f5e47c244758bb96abfb45958486bd1a077b8d1f2277023d57e19b129835d258f353a","ssdeep":"192:/WiHv4hH+0Q9hKiGDcbIao9AUsFPKD9rASDkSy9/ywmtGz1ygX:/WN+XTXBUgQU9qwGe1B","tlshash":"0302af8fd271f1cf8ea8491dd707aa5fbe1a23d21a7724b95dc0142a320f78146fe859","first_seen":"2024-06-13T10:36:03Z","last_seen":"2026-10-09T18:01:44.988962Z","times_seen":33,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/css/modalContent.css?v=8","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.241Z","timestamp":1791568842241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/css/modalContent.css?v=8 HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 22 Sep 2026 19:37:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pva3RZRdje2XILtQQ2TU3ZHhYrzGojtHIYwu3shh9w0oGCDH7csE%2BBjAKSsPV6rlKr1aGcAkTEhq7NX11rs5cuoxxvgPbjVKl9BYEZNDGKtcnguInvZ4TTBcaYPvVrjZ\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6ab2d8e0-9a1\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f494ffab356ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2465,"size_decoded":1544,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1df30e5a486708ab14bc8d0fb8df325d","sha1":"bcd22e35fdb83b5fef49408d6dd0f119c4454af5","sha256":"4363879b5802df5057005b652601c797ecc8412abc3510930e98263e7bc4696e","sha512":"4c04a86f78c2c0af98697bf902b041f15cd5bfa31b14a1afaa74e76899179320f6924351f26700cc23637011a71a93dbf18e7bd83b2e1ce8ecdf1ceb758a465d","ssdeep":"","tlshash":"715110a6556e304ef37bb9fdb3b57314af4400174f0b5ac9b4e8758a86c42f8102b4c9","first_seen":"2026-06-11T00:49:01.042813Z","last_seen":"2026-10-09T18:01:44.989932Z","times_seen":47,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/community_assets/images/items/1263950/ebe6b674deca163b28423e3b925bd36b0f0f357b.png","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.556Z","timestamp":1791568842556,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:03:00 GMT","end":"Mon, 21 Dec 2026 11:02:59 GMT"},"fingerprint":{"sha1":"35:27:95:F1:7A:87:90:C8:D5:F1:A9:04:B3:07:6D:A6:FD:D3:2C:C7","sha256":"D8:4F:7F:70:8F:7A:7E:8B:84:AD:3C:28:69:F1:A7:43:EA:B9:82:9E:88:6C:DF:63:E3:60:FB:48:13:0F:C3:63"}}},"request":{"raw":"GET /community_assets/images/items/1263950/ebe6b674deca163b28423e3b925bd36b0f0f357b.png HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 May 2020 21:29:23 GMT\r\netag: \"5ebb1533-1f6b3b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 1754151\r\nx-served-by: cache-bma-essb1270068-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 25047\r\nx-timer: S1791568843.949559,VS0,VE0\r\ncontent-length: 2059067\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2059067,"size_decoded":2059561,"mime_type":"image/png","magic":"PNG image data, 224 x 224, 8-bit/color RGBA, non-interlaced","md5":"3b5819bd92f8cfe7b73ead074d6a810b","sha1":"5ecc7f8e50514c0083bada09a0d86ab04ba59764","sha256":"11ccd916ef2cbf50a8acf49819f1c1306d4eebd26cd82abda53d2e6294bf732e","sha512":"76bd5e84ad96a68dac6c885f4bdb13a8ead4109ec3bb6fb5077cbbe4b3c2b8a802d632c0daea473ed4c121ffde1d79f9bbe2817db5e97da02028ca4e0c7e8581","ssdeep":"24576:9aDzkxH+wa4M6HapL5KeJiSuHUec9VGGMR+pjjCBol:Yz/wu6HLUIUXuGTpjjCml","tlshash":"ae2533f790326c9ee2404d2af36f7bd09f3f981d28568faf0d4901278a7399835c9565","first_seen":"2025-09-09T02:53:49.453294Z","last_seen":"2026-10-09T18:01:44.99148Z","times_seen":27,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":-1,"dns":1,"connect":11,"send":0,"wait":12,"receive":247,"ssl":292},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/shared/images/award_icon.svg","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.566Z","timestamp":1791568842566,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/shared/images/award_icon.svg HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-94e\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 77222\r\nx-served-by: cache-bma-essb1270034-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 2633\r\nx-timer: S1791568843.925409,VS0,VE0\r\ncontent-length: 2382\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2382,"size_decoded":2789,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b6d84fce4193d4f91cb2373259b5333a","sha1":"ad1157e4f0e24c8ce671af84187a6c013f13d04c","sha256":"b972d744ba896f74221183731c0a24cc79acfa434ab60dc746221cb802617ea7","sha512":"a807d31ac243722e36af42860509f03ad208a7062ac5b84170207d9d812af1852800be4c174587e44eba0c02ac43722433a40a63939e315c1cbe32dde91401a2","ssdeep":"","tlshash":"df4125fb524261d6ec4fcbf8dd3b59a5719e34ba7ea4829541349a3076742e8480dd04","first_seen":"2023-10-31T01:09:47Z","last_seen":"2026-10-09T18:01:44.99249Z","times_seen":854,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":20,"receive":0,"ssl":265},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/profile/icon_invitegroup.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.570Z","timestamp":1791568842570,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/profile/icon_invitegroup.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-529\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 25073\r\nx-served-by: cache-bma-essb1270034-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1381\r\nx-timer: S1791568843.661743,VS0,VE0\r\ncontent-length: 1321\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1321,"size_decoded":1724,"mime_type":"image/png","magic":"PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced","md5":"2481d71a1ce5140f622ed92009262144","sha1":"a2b475d874e55a2c971c606bd2fbdf7b1caccd34","sha256":"804246b92f1abfaccd87549bcd1be88693f0b9647071eb0019f26361ba1ed5ae","sha512":"7ba66a3a1f350cffc85d62f0882ebc9192bffc213794f5b7b4ca1492286b104fb38a54b21d19ff58fb91c219f34608e93217154ff10bc4f773d20048a3d2e637","ssdeep":"","tlshash":"1f2153a8e6006892b149eac314ff5027ac024885a5e0f56ad5cfdc2318b62f8a55d6d7","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-10-09T18:01:44.994183Z","times_seen":474,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/loyalty/reactions/still/4.png?v=5","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.575Z","timestamp":1791568842575,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 12:18:32 GMT","end":"Thu, 19 Nov 2026 12:18:31 GMT"},"fingerprint":{"sha1":"73:3D:80:BA:FF:E1:7B:1D:0E:6E:9A:40:E5:15:C7:6D:FE:46:B9:44","sha256":"F6:FC:99:1F:A8:9D:10:F1:85:36:C6:51:C1:BD:A3:BE:67:18:DC:98:E2:29:22:39:6F:84:4F:11:66:3A:2B:B8"}}},"request":{"raw":"GET /public/images/loyalty/reactions/still/4.png?v=5 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-2bd2\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 54361\r\nx-served-by: cache-bma-essb1270023-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 614\r\nx-timer: S1791568843.947808,VS0,VE0\r\ncontent-length: 11218\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11218,"size_decoded":11622,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"8957dab9527cfde26a2866b1d2a7160f","sha1":"67a3fe182922986e18a70676d95f52a32f4d7be5","sha256":"f862ea5938e62dbbeb69116c569d5590c20cf94f0b2ffe0ce0e29d3ccf2a15ce","sha512":"1304a162cd61584c3d52ae842e900a021edc916dc7860dc155a520946be54699b0f640adf011fdb8080a8c4ed71518e51279235f74b66db16d42a1a80d5c2f94","ssdeep":"192:iaHGWcXsH9A0Jh2ay7Y0yI2eh6e4Osssw5Xe8+oNiE0Di0GQVlxOOkwEN6vuksvN:i+cXYAMD0yCssR5XB+uiE0TPlowENAu3","tlshash":"2832af8383c19865d7bb6a0de19a3c446e4721a8de01e6581ee623e3192edf147f39f0","first_seen":"2023-05-21T22:53:43Z","last_seen":"2026-10-09T18:01:44.996582Z","times_seen":455,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":1,"connect":13,"send":0,"wait":13,"receive":40,"ssl":292},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.fastly.steamstatic.com/d763fb3064abc333bb203fb9da1dcb555e6110ad.jpg","fqdn":"avatars.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.586Z","timestamp":1791568842586,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:12:50 GMT","end":"Wed, 18 Nov 2026 06:12:49 GMT"},"fingerprint":{"sha1":"F7:B7:EC:30:15:85:8E:0C:D2:C1:E1:E6:13:0F:50:7F:10:DB:B3:BB","sha256":"B3:0D:07:72:5D:93:9D:92:7C:FD:0A:A5:C6:EF:E8:3F:3D:9B:C7:3A:60:CE:2F:5A:DC:34:1E:49:7B:1D:82:54"}}},"request":{"raw":"GET /d763fb3064abc333bb203fb9da1dcb555e6110ad.jpg HTTP/1.1\r\nHost: avatars.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: a8/+a1otR3t0ljdyrK7Ktg==\r\nlast-modified: Sun, 20 Mar 2022 22:52:58 GMT\r\netag: \"0x8DA0AC461026560\"\r\nx-ms-access-tier: Cold\r\nx-ms-access-tier-change-time: Fri, 12 Sep 2025 17:27:00 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 1756616\r\nx-served-by: cache-bma-essb1270057-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1341\r\nx-timer: S1791568843.948819,VS0,VE0\r\ncontent-length: 947\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":947,"size_decoded":1563,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 32x32, components 3","md5":"6bcffe6b5a2d477b74963772acaecab6","sha1":"d763fb3064abc333bb203fb9da1dcb555e6110ad","sha256":"d0d62ddb76c28cebe9af4756055e0496ade4ec974ed8ac5184e00d325f7f1f2b","sha512":"ec22a8eaf9cbaa5b4bf62d73bde3e49738b844e379c0cca49dbe5060b080aef622a56274d1a211272d870b562441d1f90661980dca29f27ff11008c8f7f47648","ssdeep":"","tlshash":"5d11633c63832be5fc2f58768496fdbe86f54612bc940c9fb8cc2511174639b0aa0679","first_seen":"2023-05-03T21:37:58Z","last_seen":"2026-10-09T18:01:44.997583Z","times_seen":28,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":304,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/1399ad157/ffc79/5628c0e.css?v=RuZY1Xmx","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sowmoscow.com/cc5a62cf5","date":"2026-10-09T18:00:43.300Z","timestamp":1791568843300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sowmoscow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 16:46:44 GMT","end":"Sun, 27 Dec 2026 16:46:43 GMT"},"fingerprint":{"sha1":"3D:53:78:1E:D7:E4:B5:A1:9D:AA:AA:29:4C:4C:65:4E:49:46:6B:8D","sha256":"5D:4B:49:1A:59:A4:4C:84:AE:D0:47:21:8E:AE:B0:B5:64:CC:8A:83:1B:99:16:1A:AE:9C:25:09:01:CC:AA:0C"}}},"request":{"raw":"GET /1399ad157/ffc79/5628c0e.css?v=RuZY1Xmx HTTP/1.1\r\nHost: sowmoscow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sowmoscow.com/cc5a62cf5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:43 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 09 Oct 2026 18:00:43 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5BjW12m3SMbwHTER9H8XZKSb0bzdIcxgAKCagMKQJ%2BsJlgsuSvyFp4jp2wnfA1OP%2FqKwLOQPc5bqEA%2BKe4FtBylASgM9aDzlo7uMIINgl8w1ZjI7y7pcAnSHbRqQieeh\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47f49569fa9b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42110,"size_decoded":14545,"mime_type":"text/css","magic":"ASCII text, with very long lines (42110), with no line terminators","md5":"913daee547317dd6872d973329bd6fd1","sha1":"ab7108206509b8b2d9d8d646d61815a223415b15","sha256":"05650cd402897bb85823b61828a7f9160ccb5ab0a18cdde037f4d3a305570d20","sha512":"31f1db1d59d3eb02dc5d21445fd0ba53eaf615148d141fce3470f0f38975a8d1e82f7a2bf8bae2e4608ae2ed77f3106296c25369b8313cd1d6c01b1ea18f8e60","ssdeep":"384:2JrR7w7fy5/DRQ47HiE/fzYtbNMYb2a+L72GG1sw26NMEgRIfilXRMheJTUF13w:2JrR0Wz/HL7GaFGs+MEgRIfiVRMJNw","tlshash":"69133a3069852039b537d8a2b2e52bde712ac503d933477eef6576bcca822d62373705","first_seen":"2026-10-09T18:01:44.998676Z","last_seen":"2026-10-09T18:01:44.998676Z","times_seen":1,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamusercontent.com/ugc/2324488744551348449/2CD87D5E8A0FD3D1F85F1388B67581CAF22A7089/?imw=100\u0026imh=56\u0026ima=fit\u0026impolicy=Letterbox\u0026imcolor=%23000000\u0026letterbox=true","fqdn":"images.steamusercontent.com","domain":"steamusercontent.com","tld":"com"},"ip":{"addr":"23.36.76.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.609Z","timestamp":1791568842609,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.akamai.steamusercontent.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 15:27:02 GMT","end":"Thu, 07 Jan 2027 15:27:01 GMT"},"fingerprint":{"sha1":"1E:9B:96:89:3E:03:79:C4:66:5A:85:05:4E:AA:87:29:54:12:C8:23","sha256":"63:B5:2A:C0:FE:ED:7D:91:BF:56:8B:A3:B7:6F:56:9A:88:43:C8:05:28:78:43:06:D8:08:15:5E:97:46:E0:02"}}},"request":{"raw":"GET /ugc/2324488744551348449/2CD87D5E8A0FD3D1F85F1388B67581CAF22A7089/?imw=100\u0026imh=56\u0026ima=fit\u0026impolicy=Letterbox\u0026imcolor=%23000000\u0026letterbox=true HTTP/1.1\r\nHost: images.steamusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 29 Aug 2026 09:31:55 GMT\r\nAccess-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-lease-state,x-ms-blob-type,Content-Disposition,x-ms-server-encrypted,x-ms-access-tier,x-ms-access-tier-change-time,Accept-Ranges,Content-Length,Date,Transfer-Encoding\r\nETag: \"0x8DC23449C7BFB30\"\r\nServer: Akamai Image Manager\r\nContent-Length: 3318\r\nContent-Type: image/jpeg\r\nCache-Control: private, no-transform, max-age=587588\r\nExpires: Fri, 16 Oct 2026 13:13:50 GMT\r\nDate: Fri, 09 Oct 2026 18:00:42 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3318,"size_decoded":3977,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 100x56, components 3","md5":"3b721b4aad087fc10b153428e713ee3b","sha1":"ad0d2e4e93f3aca36988ac0e3553ebfaa1b6f3c5","sha256":"b50cb9424273a553636d70d14d7051976597c474fd5023ac4f47f8c1e44b5c04","sha512":"4893a46877b393b656474ac241d345f0770427e03d848e28cd16fe398aec701474af1ebb79c239a90493ec8cd8f5f5eb66e32fd5a80ce69849c1e0694d13cef8","ssdeep":"","tlshash":"9e616c35c26099c5d4c0113aebadc3398230a220dace23aeb4c994985e6c3d82b8432f","first_seen":"2026-10-02T02:33:52.835023Z","last_seen":"2026-10-09T18:01:45.001446Z","times_seen":14,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":1,"connect":3,"send":0,"wait":20,"receive":0,"ssl":226},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/community_assets/images/items/593740/1538f1e214909bf4a42bbdd23f93f246d4cee22c.png","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.610Z","timestamp":1791568842610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:03:00 GMT","end":"Mon, 21 Dec 2026 11:02:59 GMT"},"fingerprint":{"sha1":"35:27:95:F1:7A:87:90:C8:D5:F1:A9:04:B3:07:6D:A6:FD:D3:2C:C7","sha256":"D8:4F:7F:70:8F:7A:7E:8B:84:AD:3C:28:69:F1:A7:43:EA:B9:82:9E:88:6C:DF:63:E3:60:FB:48:13:0F:C3:63"}}},"request":{"raw":"GET /community_assets/images/items/593740/1538f1e214909bf4a42bbdd23f93f246d4cee22c.png HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Sat, 02 Dec 2017 23:50:47 GMT\r\netag: \"5a233c57-3bc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 736733\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270068-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1791568843.942481,VS0,VE1\r\ncontent-length: 956\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":956,"size_decoded":1438,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGB, non-interlaced","md5":"fa82bbf6ac5bb8c3db3e9c40c4a30591","sha1":"1538f1e214909bf4a42bbdd23f93f246d4cee22c","sha256":"c685f9ebd6b1fd8d77ed23a51fd9e2e3001412a54b29a6e787432db721bbd803","sha512":"f2b620214e2c6915475cf8537df9cac28345977d94cbfdc6cb2eeb3d57f0b4f8d4b4b55c9fbd008f27b8012181f61ea7c3a8514bb63cc624eef9007fa62b8acd","ssdeep":"","tlshash":"811154c4ec46d66c7b1b8a637042475cd82a2168b4481ea116f2ad0abf5a5503354257","first_seen":"2026-10-02T02:33:52.799312Z","last_seen":"2026-10-09T18:01:45.004114Z","times_seen":14,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":1,"connect":11,"send":0,"wait":14,"receive":0,"ssl":293},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/loyalty/reactions/still/16.png?v=5","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.577Z","timestamp":1791568842577,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 12:18:32 GMT","end":"Thu, 19 Nov 2026 12:18:31 GMT"},"fingerprint":{"sha1":"73:3D:80:BA:FF:E1:7B:1D:0E:6E:9A:40:E5:15:C7:6D:FE:46:B9:44","sha256":"F6:FC:99:1F:A8:9D:10:F1:85:36:C6:51:C1:BD:A3:BE:67:18:DC:98:E2:29:22:39:6F:84:4F:11:66:3A:2B:B8"}}},"request":{"raw":"GET /public/images/loyalty/reactions/still/16.png?v=5 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-23e3\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 65043\r\nx-served-by: cache-bma-essb1270023-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 839\r\nx-timer: S1791568843.947715,VS0,VE0\r\ncontent-length: 9187\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9187,"size_decoded":9590,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"23e4a0f49ad9419a43cc5568d8152705","sha1":"4f7c00f96c8f512c053dc322199a896cc1067b49","sha256":"438321951b4826bd3258b836cef8503b09f3222f06102d838ec829d554e01387","sha512":"36fabfe868b929224a44ad2ffc9f4efb08e95ee655c6f8a8a026497f01ef5aad1f1f353a830ddaaa73e2dadd3d714ac8d635c8a9cdcf1519c24be04f528a3d94","ssdeep":"192:id4nGatkXSg4t2I1GjfYiYjU4AsLxTYeAR:id4nQOeTY/UXCVY7","tlshash":"5e12bf324df64084ab99a34f2dca20c72f2760b14e3c47bbd4744a98cb54764bdb9586","first_seen":"2023-05-10T18:55:19Z","last_seen":"2026-10-09T18:01:45.005972Z","times_seen":656,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":1,"connect":13,"send":0,"wait":13,"receive":26,"ssl":294},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.fastly.steamstatic.com/21300dd770afee592820d3016022172aba213fb1.jpg","fqdn":"avatars.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.588Z","timestamp":1791568842588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:12:50 GMT","end":"Wed, 18 Nov 2026 06:12:49 GMT"},"fingerprint":{"sha1":"F7:B7:EC:30:15:85:8E:0C:D2:C1:E1:E6:13:0F:50:7F:10:DB:B3:BB","sha256":"B3:0D:07:72:5D:93:9D:92:7C:FD:0A:A5:C6:EF:E8:3F:3D:9B:C7:3A:60:CE:2F:5A:DC:34:1E:49:7B:1D:82:54"}}},"request":{"raw":"GET /21300dd770afee592820d3016022172aba213fb1.jpg HTTP/1.1\r\nHost: avatars.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AP6rU82tL5Lzihy3Bs-J9nNu0q4VD40UFBvW1Xw0FFJgv6VNN_FgATOv3e6ujfqVb2v6hd-p\r\nlast-modified: Fri, 11 Mar 2022 07:17:54 GMT\r\netag: \"d5152ebe26ca92a788b677b8d3313fca\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 369082\r\nx-served-by: cache-bma-essb1270057-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 48\r\nx-timer: S1791568843.948785,VS0,VE0\r\ncontent-length: 1649\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1649,"size_decoded":2250,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 32x32, components 3","md5":"d5152ebe26ca92a788b677b8d3313fca","sha1":"21300dd770afee592820d3016022172aba213fb1","sha256":"c87e7d507c8c96d4ab26a0d75acc72a30758591b316e5c0c68c1d70def2bdc4a","sha512":"b8e749160c6c2c6c878fc74b90617b1b9d0083bbfb86ec054aab5e78cfba54981ce3dbf6d37ff1ebef87965002f47854ab913907682f452b169c6834205d8ff2","ssdeep":"","tlshash":"bf31f643872343d0b8bb41bdc5099e81e1e887f6bed48d1220eb0422d3202e4f7c8a28","first_seen":"2024-02-10T04:46:57Z","last_seen":"2026-10-09T18:01:45.007858Z","times_seen":27,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":304,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/community_assets/images/items/607030/c7c3ee22a3ce7930734570f3e72fc677efdda3a6.png","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.612Z","timestamp":1791568842612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:03:00 GMT","end":"Mon, 21 Dec 2026 11:02:59 GMT"},"fingerprint":{"sha1":"35:27:95:F1:7A:87:90:C8:D5:F1:A9:04:B3:07:6D:A6:FD:D3:2C:C7","sha256":"D8:4F:7F:70:8F:7A:7E:8B:84:AD:3C:28:69:F1:A7:43:EA:B9:82:9E:88:6C:DF:63:E3:60:FB:48:13:0F:C3:63"}}},"request":{"raw":"GET /community_assets/images/items/607030/c7c3ee22a3ce7930734570f3e72fc677efdda3a6.png HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Mon, 09 May 2022 14:39:32 GMT\r\netag: \"627927a4-ecf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 155918\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270068-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1791568843.662678,VS0,VE2\r\ncontent-length: 3791\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3791,"size_decoded":4274,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"49863d537f5198101c65734555b2ab73","sha1":"c7c3ee22a3ce7930734570f3e72fc677efdda3a6","sha256":"9c855d2c212790e7408c50114c2004b535441ede448cd271a5489900c1ab0f00","sha512":"decaa15dc8d366cb8099c2b1eb9570f6565220d34684e97265ee4cb7cbee441c80b8609ccd4848d45d967839371803be23bbed423b825fde970ffb1a831b64df","ssdeep":"","tlshash":"3f717dda1988b3bfd90a42be000a437e3c3f65b054c71147046d8fbaf6c644670d7957","first_seen":"2026-10-02T02:33:52.802414Z","last_seen":"2026-10-09T18:01:45.012002Z","times_seen":14,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":1,"connect":11,"send":0,"wait":23,"receive":2,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.fastly.steamstatic.com/1995d0ee8484bbeb8998ce4d4d30553dbdce423a_full.jpg","fqdn":"avatars.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.602Z","timestamp":1791568842602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:12:50 GMT","end":"Wed, 18 Nov 2026 06:12:49 GMT"},"fingerprint":{"sha1":"F7:B7:EC:30:15:85:8E:0C:D2:C1:E1:E6:13:0F:50:7F:10:DB:B3:BB","sha256":"B3:0D:07:72:5D:93:9D:92:7C:FD:0A:A5:C6:EF:E8:3F:3D:9B:C7:3A:60:CE:2F:5A:DC:34:1E:49:7B:1D:82:54"}}},"request":{"raw":"GET /1995d0ee8484bbeb8998ce4d4d30553dbdce423a_full.jpg HTTP/1.1\r\nHost: avatars.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AKhXX7Is-88_IOax2k29-WMkypu3r5NLyj6V7TOPY1VqmW3w0ZlTg2Ls_Dssv-qwqBys1B2i\r\nlast-modified: Thu, 10 Mar 2022 21:29:48 GMT\r\netag: \"17e33059df7dec579e41c6b899a7f4b0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 720433\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270057-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1791568843.957969,VS0,VE1\r\ncontent-length: 8135\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8135,"size_decoded":8735,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"17e33059df7dec579e41c6b899a7f4b0","sha1":"990b8395a59fd5f8e33e14af064ccc6bf298609a","sha256":"cc00478d378e55316720d6854346b64322bed77134bc9b0df5b24284026dddb0","sha512":"92e75972aef7a889e981c3912f14a1298c22bfef00573a7569b73f67220ce01a99cb65ea14bb1c5545c0bfe6047eafa0fd28548c782185c522669a4a6b79fae6","ssdeep":"192:hy4z9ADu1OCmALurv7hE+18skvhRK6hE7/:hy4zT1Ob7r18sG3K6y/","tlshash":"f3f1ae99c79739d6ff53538072d17d65a0fae64778eca05b37f430820c22ea751a0a4a","first_seen":"2026-10-02T02:33:52.913677Z","last_seen":"2026-10-09T18:01:45.012887Z","times_seen":14,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":1,"connect":10,"send":0,"wait":48,"receive":6,"ssl":300},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamusercontent.com/ugc/2324488744551347419/010A0C33654231493160E9D71F8AF862CB0DAEF7/?imw=506\u0026imh=284\u0026ima=fit\u0026impolicy=Letterbox\u0026imcolor=%23000000\u0026letterbox=true","fqdn":"images.steamusercontent.com","domain":"steamusercontent.com","tld":"com"},"ip":{"addr":"23.36.76.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.605Z","timestamp":1791568842605,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.akamai.steamusercontent.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 15:27:02 GMT","end":"Thu, 07 Jan 2027 15:27:01 GMT"},"fingerprint":{"sha1":"1E:9B:96:89:3E:03:79:C4:66:5A:85:05:4E:AA:87:29:54:12:C8:23","sha256":"63:B5:2A:C0:FE:ED:7D:91:BF:56:8B:A3:B7:6F:56:9A:88:43:C8:05:28:78:43:06:D8:08:15:5E:97:46:E0:02"}}},"request":{"raw":"GET /ugc/2324488744551347419/010A0C33654231493160E9D71F8AF862CB0DAEF7/?imw=506\u0026imh=284\u0026ima=fit\u0026impolicy=Letterbox\u0026imcolor=%23000000\u0026letterbox=true HTTP/1.1\r\nHost: images.steamusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 05 Jun 2026 18:49:01 GMT\r\nAccess-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-lease-state,x-ms-blob-type,Content-Disposition,x-ms-server-encrypted,x-ms-access-tier,x-ms-access-tier-change-time,Accept-Ranges,Content-Length,Date,Transfer-Encoding\r\nETag: \"0x8DC234498995E3A\"\r\nServer: Akamai Image Manager\r\nContent-Length: 30499\r\nContent-Type: image/jpeg\r\nCache-Control: private, no-transform, max-age=593859\r\nExpires: Fri, 16 Oct 2026 14:58:21 GMT\r\nDate: Fri, 09 Oct 2026 18:00:42 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30499,"size_decoded":31159,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 506x284, components 3","md5":"a0d0453270906246d36b2588ac5c605d","sha1":"331a620f59683fb925cf3666ad0296da4c357056","sha256":"1b96056729caeb3c405abebe4f80454f3f247f59d8dccddf4adb7739acfc4f65","sha512":"01ffa066fa4c69930075df7df7b67172d0580564939cdebad458e1a71487a46b106c8a30f9a1795e2ff2fd1f9f379be83a987eb1905f5a858cf17000a04ad633","ssdeep":"768:QtXXm/2vtlAaE1fJ9ODc77KJ3e9gOZQt6w5NiP3u:gXy6DAaE1fJ9OC7o0dZqym","tlshash":"65d2e1880d33cec4e06555ea5be8e7398227643b53e61e51ac64b7c6de2a0af34b43d4","first_seen":"2026-10-02T02:33:52.809766Z","last_seen":"2026-10-09T18:01:45.0149Z","times_seen":14,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":1,"connect":3,"send":0,"wait":67,"receive":0,"ssl":225},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.fastly.steamstatic.com/635e88305c56ff7744ece1e58477d997019fa074.jpg","fqdn":"avatars.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.624Z","timestamp":1791568842624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:12:50 GMT","end":"Wed, 18 Nov 2026 06:12:49 GMT"},"fingerprint":{"sha1":"F7:B7:EC:30:15:85:8E:0C:D2:C1:E1:E6:13:0F:50:7F:10:DB:B3:BB","sha256":"B3:0D:07:72:5D:93:9D:92:7C:FD:0A:A5:C6:EF:E8:3F:3D:9B:C7:3A:60:CE:2F:5A:DC:34:1E:49:7B:1D:82:54"}}},"request":{"raw":"GET /635e88305c56ff7744ece1e58477d997019fa074.jpg HTTP/1.1\r\nHost: avatars.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AP6rU82fUnNyuB8KC5rYmESt_cqEaWfoqmZOwa6NeCFy1RzbgG0GQLuetuersYC7CYKEyVnbC9i-DWM\r\nlast-modified: Mon, 14 Mar 2022 20:12:13 GMT\r\netag: \"dde2f889754d15e0857d7ff3a6f3a45c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 736732\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270057-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1791568843.950088,VS0,VE2\r\ncontent-length: 957\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":957,"size_decoded":1563,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3","md5":"dde2f889754d15e0857d7ff3a6f3a45c","sha1":"635e88305c56ff7744ece1e58477d997019fa074","sha256":"f05f71a72b7a0246f75ac557a1878069ee0d92200860e01e04992944430cd30b","sha512":"9ea266e073c3a9062861cb15600604f5414da50f623694137c898e03303f62f7d431a5b3590e8c58052bbd2dc62bca1c7437c08748e4d81a4a41c0cff83c5176","ssdeep":"","tlshash":"c411440edbd997c1f3383934f6a97f5ad7e47657600088eb57ed494490fa3a84a0c224","first_seen":"2026-10-02T02:33:52.933146Z","last_seen":"2026-10-09T18:01:45.017237Z","times_seen":14,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":271,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/fonts/MotivaSans-Regular.ttf","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.690Z","timestamp":1791568842690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/fonts/MotivaSans-Regular.ttf HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/css/motiva_sans.css?v=8\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 22 Sep 2026 19:37:16 GMT\r\npriority: u=3,i=?0\r\netag: \"6ab2d8ec-1df3c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lj8%2FoSdscmDeFkwCSARD20VqYRKjdRRT5STGFzrN2dKakdGSIbMY3o3qxgZJNMOlcZaqTdmRHufO3MGOWcDhVRMYrCaxIVzOvBVOSavM0BCS3T0IMQGc66zHg9q%2BRdCV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f4952cb5f56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 122684\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122684,"size_decoded":123392,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 22 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;MotivaSan","md5":"57613e143ff3dae10f282e84a066de28","sha1":"88756cc8c6db645b5f20aa17b14feefb4411c25f","sha256":"19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14","sha512":"94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176","ssdeep":"3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh","tlshash":"82c34b06f316e70aec614e3c66769399b358f8a53f2fcb0b95857d60bcad0d51e8128c","first_seen":"2023-04-05T04:16:14Z","last_seen":"2026-10-09T18:01:44.966929Z","times_seen":7486,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/images/levels_hexagons.png","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.848Z","timestamp":1791568842848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/images/levels_hexagons.png HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 22 Sep 2026 19:38:33 GMT\r\npriority: u=4,i\r\netag: \"6ab2d939-ba4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GyRIHZP5N34gsP9xMXDmDvKBxXUVNL3xcbe%2BznQMNIUrsda%2BJCYwu2QSAP2hJYF9ERSqDbxNWyKTy0G56I8s%2FTeW4Xl07WV2OVWJ6TVsVjIzZ2xVktMMEOeMXU9ZjRHO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f4953cba956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2980\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2980,"size_decoded":3668,"mime_type":"image/png","magic":"PNG image data, 32 x 320, 8-bit/color RGBA, non-interlaced","md5":"e0aa921c1a4ad2ff2853128354fe2854","sha1":"02731ca3aec80f2f887038619ae465a1d34a6912","sha256":"e01ba874fe718b0b9cc7d8661fb21f3346f4dbbbe14c5a6dabfd02bba2c744dc","sha512":"40ed1bb386c5a5698819672a8dea6d83da77dbe556cdccccdb157ededf9bae22646e47c0c9263f7df6822e5e05e81f6bc8da704ddd3909784e9821ae8d12e326","ssdeep":"","tlshash":"19514a8b4300ce4471d31bf6bc1cd867a5a390a5580ba4d51ffb5420e77388aa818eda","first_seen":"2023-04-16T19:46:25Z","last_seen":"2026-10-09T18:01:45.018343Z","times_seen":368,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/1399ad157/ffc79/50b14ae.js?v=RuZY1Xmx","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sowmoscow.com/cc5a62cf5","date":"2026-10-09T18:00:43.301Z","timestamp":1791568843301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sowmoscow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 16:46:44 GMT","end":"Sun, 27 Dec 2026 16:46:43 GMT"},"fingerprint":{"sha1":"3D:53:78:1E:D7:E4:B5:A1:9D:AA:AA:29:4C:4C:65:4E:49:46:6B:8D","sha256":"5D:4B:49:1A:59:A4:4C:84:AE:D0:47:21:8E:AE:B0:B5:64:CC:8A:83:1B:99:16:1A:AE:9C:25:09:01:CC:AA:0C"}}},"request":{"raw":"GET /1399ad157/ffc79/50b14ae.js?v=RuZY1Xmx HTTP/1.1\r\nHost: sowmoscow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sowmoscow.com/cc5a62cf5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:43 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 09 Oct 2026 18:00:43 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yjqArMYQwhbUCnii%2FrKMjv7RWHW2U%2BMu8js%2Fj%2BdTSEco%2BIj0pa54Cyg4jCNNBc%2Fck2jLaGQ24VhwJT2seOWrL65hP1R2g%2FFjtdTITiZMeqHU%2FqEk%2FEwZT7QWIvbjTGo8\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47f49569fabb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95701,"size_decoded":37851,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32086)","md5":"eba51a61894a773df5cab2a18e499c0b","sha1":"e028428f4f367af2660a66e976f223695020e732","sha256":"225edf54855697e6207ba9bded4d041d824e44c7c842f2803ede51764a9e54ab","sha512":"a57c4b5a43b3b629737c98ca9fb0cd549bc35c300208c23690bf9f04312d2aaca179d6cf523f031f2d6dcd42b4e8156a149b0ae676cc09737a6615c8d7119cfc","ssdeep":"1536:DPEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzmQ:oNMyqhJvN32cBC7M6Whca98Hrp","tlshash":"bd93d8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","first_seen":"2023-03-07T12:27:03Z","last_seen":"2026-10-09T18:01:45.020434Z","times_seen":271,"resource_available":true,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":299,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/1399ad157/ffc79/fa0779e.ttf","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sowmoscow.com/cc5a62cf5","date":"2026-10-09T18:00:47.321Z","timestamp":1791568847321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sowmoscow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 16:46:44 GMT","end":"Sun, 27 Dec 2026 16:46:43 GMT"},"fingerprint":{"sha1":"3D:53:78:1E:D7:E4:B5:A1:9D:AA:AA:29:4C:4C:65:4E:49:46:6B:8D","sha256":"5D:4B:49:1A:59:A4:4C:84:AE:D0:47:21:8E:AE:B0:B5:64:CC:8A:83:1B:99:16:1A:AE:9C:25:09:01:CC:AA:0C"}}},"request":{"raw":"GET /1399ad157/ffc79/fa0779e.ttf HTTP/1.1\r\nHost: sowmoscow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sowmoscow.com/1399ad157/ffc79/5628c0e.css?v=RuZY1Xmx\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mCVrSwvHCQLNuSNax9gHlwS1YTZnUxIRqd5WMqy7J2H3ugS1bvjQUc2Pe0a6ERDIymbmovKpFKWBQyf%2Fs4mS5YWYL7Ci4Aqw4Qg9FXemI07B4UYOlC4J2%2B228dovHqG%2B\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47f496fbcedb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":623,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/images/header_logo.png?v=8","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.539Z","timestamp":1791568842539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/images/header_logo.png?v=8 HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 22 Sep 2026 19:37:47 GMT\r\npriority: u=5,i\r\netag: \"6ab2d90b-2a6f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ztlf%2B7MEqwXrihPXwXKNmvdRi0Uj1gxboJEpI363M8tyC6wX0fbSrivCZNRSQm0uWjy0%2F0p2ippd95KSNf0ah82nRb5%2BZZLLDHCfZCtKuDzrLwc19WOzoBiXfI3jYNH%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f4951db1256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10863\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10863,"size_decoded":11555,"mime_type":"image/png","magic":"PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced","md5":"a4e79c73ee13cb25b60fc4b0ba1f690c","sha1":"b690c31b2eb1b0eb085e91aaae7e79f03debe7c1","sha256":"6cb869df089146c12efb5e9c968e911c314842624ba6f052a11346ac734cadc8","sha512":"aad423119f410a655f0aa475d2fe692087d7262c3986ce71347981c5b60f6a10031d7050bf9b9aee4e7d84d814f0b8883c964028fcbe14ed3464602f3ba6cec3","ssdeep":"192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM","tlshash":"4722c06cfcc0c875958352ba3e27fb7043f93e10c44b86b86960e5a5365c8f4959d137","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-10-09T18:01:45.023344Z","times_seen":7734,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fastly.steamstatic.com/steamcommunity/public/assets/profile/equipped_items_icon.svg","fqdn":"cdn.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.568Z","timestamp":1791568842568,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:02:57 GMT","end":"Mon, 21 Dec 2026 11:02:56 GMT"},"fingerprint":{"sha1":"45:D2:1E:2E:C1:1E:A8:9E:FE:EA:CA:B5:EE:DE:0B:E7:14:58:8E:7B","sha256":"C9:EB:B3:D5:A9:B2:F8:69:A9:40:A5:21:91:02:43:42:12:4B:54:2A:F1:29:2E:01:C7:AE:F1:AD:28:CB:AC:B3"}}},"request":{"raw":"GET /steamcommunity/public/assets/profile/equipped_items_icon.svg HTTP/1.1\r\nHost: cdn.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 22 Nov 2024 18:31:37 GMT\r\netag: \"6740ce09-305\"\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 39940\r\nx-served-by: cache-bma-essb1270058-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1715\r\nx-timer: S1791568843.948025,VS0,VE0\r\ncontent-length: 773\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":773,"size_decoded":1141,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"07e68f4a8fccf445de013ae272dbfd37","sha1":"9bd297e604b1b47cf5e2539b4e98daeb71926bfa","sha256":"37ae68e419904f5deac7f3b6ef9b0b800f12ac0f0ad26afbedaa583384a38c78","sha512":"f034317ac3e38a9583ed281b6dc014cc30ee76e20879264b08262903278fb99f9b44bcecd166a36f9c13d0e9bbc31d24ff2d64f2fa9994b1d430a30e311cf1a4","ssdeep":"","tlshash":"a80190bff01d5d2d50819358558dac029086f843b21764c1a7d3361cbd918b3c536f65","first_seen":"2024-11-28T05:35:24.168488Z","last_seen":"2026-10-09T18:01:45.024141Z","times_seen":216,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":1,"connect":10,"send":0,"wait":13,"receive":0,"ssl":307},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.fastly.steamstatic.com/1914d97b9ba35e67e7ee7d60f7dddadd1782cf7b_medium.jpg","fqdn":"avatars.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.593Z","timestamp":1791568842593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:12:50 GMT","end":"Wed, 18 Nov 2026 06:12:49 GMT"},"fingerprint":{"sha1":"F7:B7:EC:30:15:85:8E:0C:D2:C1:E1:E6:13:0F:50:7F:10:DB:B3:BB","sha256":"B3:0D:07:72:5D:93:9D:92:7C:FD:0A:A5:C6:EF:E8:3F:3D:9B:C7:3A:60:CE:2F:5A:DC:34:1E:49:7B:1D:82:54"}}},"request":{"raw":"GET /1914d97b9ba35e67e7ee7d60f7dddadd1782cf7b_medium.jpg HTTP/1.1\r\nHost: avatars.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nx-amz-id-2: AQCRQQEprGNEMFokceQH85F+39Qt8dbmL2hqGDP93GLrVIMQoTntHMoXb19aYAtte2+HU/HzJXM=\r\nx-amz-request-id: 7DT95JXV07NJTR28\r\nlast-modified: Sat, 20 Jun 2026 17:57:48 GMT\r\netag: \"31912a52557d57e93039eb29e63d8589\"\r\nx-amz-server-side-encryption: AES256\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 736733\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270057-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1791568843.948285,VS0,VE2\r\ncontent-length: 2425\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2425,"size_decoded":3093,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 64x64, components 3","md5":"31912a52557d57e93039eb29e63d8589","sha1":"270fd6e597253c1b5039e46c95c2d55bb0731747","sha256":"59eb6b6e302df4e2532a18d2dffcabf2eb9514f997c6bea40d6d0e2ccdb26b1b","sha512":"eaa66b1190525260baafccafef7bac0c9f87617e6ad4e32608143b05e89e6af99c168f59882e9028ef19d6ee8e8bc3c209e3d1b2b7d9a905f281d5620877386d","ssdeep":"","tlshash":"80410a97a1b14feafa22c530e0711c0195f85431f251778ae2ce72586673afc9c0af21","first_seen":"2026-10-02T02:33:52.88118Z","last_seen":"2026-10-09T18:01:45.025015Z","times_seen":14,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":1,"connect":10,"send":0,"wait":15,"receive":3,"ssl":295},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamusercontent.com/ugc/2268193115367488536/D8A288DE8DD56046E03392D533AFD7D5E06CDDDB/?imw=506\u0026ima=fit\u0026impolicy=Letterbox\u0026imcolor=%23000000\u0026letterbox=false","fqdn":"images.steamusercontent.com","domain":"steamusercontent.com","tld":"com"},"ip":{"addr":"23.36.76.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.595Z","timestamp":1791568842595,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.akamai.steamusercontent.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 15:27:02 GMT","end":"Thu, 07 Jan 2027 15:27:01 GMT"},"fingerprint":{"sha1":"1E:9B:96:89:3E:03:79:C4:66:5A:85:05:4E:AA:87:29:54:12:C8:23","sha256":"63:B5:2A:C0:FE:ED:7D:91:BF:56:8B:A3:B7:6F:56:9A:88:43:C8:05:28:78:43:06:D8:08:15:5E:97:46:E0:02"}}},"request":{"raw":"GET /ugc/2268193115367488536/D8A288DE8DD56046E03392D533AFD7D5E06CDDDB/?imw=506\u0026ima=fit\u0026impolicy=Letterbox\u0026imcolor=%23000000\u0026letterbox=false HTTP/1.1\r\nHost: images.steamusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 16 Sep 2026 10:22:18 GMT\r\nAccess-Control-Expose-Headers: x-goog-content-length-range\r\nETag: \"2cbd71fe8d9b48d8b236a571ea976e43\"\r\nServer: Akamai Image Manager\r\nX-Serial: 681\r\nContent-Length: 4989966\r\nContent-Type: image/gif\r\nCache-Control: private, no-transform, max-age=92148\r\nExpires: Sat, 10 Oct 2026 19:36:30 GMT\r\nDate: Fri, 09 Oct 2026 18:00:42 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4989966,"size_decoded":4990414,"mime_type":"image/gif","magic":"GIF image data, version 89a, 506 x 928","md5":"fbf0fa9039b61328cdf60ecb4270107e","sha1":"c4862ba0bcd4e2b05b64c73b4776d81efd638600","sha256":"0fc128e2f4761a41ff34f4b8a2d53bb8f86e2c99a8eb74036ff78351093f19f3","sha512":"2346ee030e70c0494dc910dcb74e20760f250deafeb80154bcdd331d31002b15ac6aa8e5a58adb8df3fb1c148c42c6d457499be3786a749445c280f88679e01a","ssdeep":"24576:JSnL3IIFGnQYRIaVWjlLAbUKiq94lixt1twAr9hEbPuOZ/:ZsU4jlLA4lqk4t1b9Op","tlshash":"18253369ac6e63b0c22c86bf8f9e60ef4dc3946683f5b34b8f8553ad807794c7519610","first_seen":"2026-10-02T02:33:52.907046Z","last_seen":"2026-10-09T18:01:45.025865Z","times_seen":14,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":1,"connect":3,"send":0,"wait":11,"receive":420,"ssl":226},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/community_assets/images/items/619220/8d125b78c46c14e0ab67d7eec18f621d622f400f.png","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.618Z","timestamp":1791568842618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:03:00 GMT","end":"Mon, 21 Dec 2026 11:02:59 GMT"},"fingerprint":{"sha1":"35:27:95:F1:7A:87:90:C8:D5:F1:A9:04:B3:07:6D:A6:FD:D3:2C:C7","sha256":"D8:4F:7F:70:8F:7A:7E:8B:84:AD:3C:28:69:F1:A7:43:EA:B9:82:9E:88:6C:DF:63:E3:60:FB:48:13:0F:C3:63"}}},"request":{"raw":"GET /community_assets/images/items/619220/8d125b78c46c14e0ab67d7eec18f621d622f400f.png HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Sat, 08 Apr 2017 07:34:15 GMT\r\netag: \"58e89277-2097\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1369023\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270068-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1791568843.663437,VS0,VE1\r\ncontent-length: 8343\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8343,"size_decoded":8828,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"4506096ac59b8dd88cd9e67f29e428ea","sha1":"8d125b78c46c14e0ab67d7eec18f621d622f400f","sha256":"652f639450fac68755e573f417f631dc2483215ce76a1ffb7a5cf4d9a89dce41","sha512":"0a74d3f11d08a97d1d8d40d6d86a062a35ec488c8b403140ed2de14d1c2ab6b4f8f4af3b5cf435f583aa529b1e7c8a459746b84c1f5be695fac29d1e9bcde8f6","ssdeep":"192:pSDS0tKg9E05TL+jP+zpEA0olbFoNp7IUS1X9:QJXE05O+aIoj7IUq","tlshash":"8702bff5943624893c8ab87009cda0049b39523ed5f72615b481b1eedc2694f5b070eb","first_seen":"2026-10-02T02:33:52.754725Z","last_seen":"2026-10-09T18:01:45.026702Z","times_seen":14,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T18:00:41.492Z","timestamp":1791568841492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YuVcR2rdhIPOKMZKsM1dXT4Cwxj4k0YgTGTZGZ3LYWO%2B3BrBTmvJBwzrCHu%2BQaycwek2ewujhu95sA4%2F8BxK6gH5kG%2FLmJ9Z3hO6Xfi837qeR3uP0C3sccryyu1l1Sly\"}]}\r\npriority: u=0,i\r\nlocation: /lp/sst-cgj/ibqkztxe/\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f494b89ce56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":9,"connect":22,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avatars.fastly.steamstatic.com/086e3893934b3d2922dc264a8a154e83fcb92a7f_medium.jpg","fqdn":"avatars.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.594Z","timestamp":1791568842594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:12:50 GMT","end":"Wed, 18 Nov 2026 06:12:49 GMT"},"fingerprint":{"sha1":"F7:B7:EC:30:15:85:8E:0C:D2:C1:E1:E6:13:0F:50:7F:10:DB:B3:BB","sha256":"B3:0D:07:72:5D:93:9D:92:7C:FD:0A:A5:C6:EF:E8:3F:3D:9B:C7:3A:60:CE:2F:5A:DC:34:1E:49:7B:1D:82:54"}}},"request":{"raw":"GET /086e3893934b3d2922dc264a8a154e83fcb92a7f_medium.jpg HTTP/1.1\r\nHost: avatars.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AP6rU83aymDVd2_KXNrBy6uQLKjw67__fSgEMecb83FOHldrJ2kydfawZuCys2ICGkoZEACV_V0Xo6w\r\nlast-modified: Tue, 25 Mar 2025 20:15:32 GMT\r\netag: \"0c5ab9417431f6cff445fae479d61195\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 676759\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270057-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1791568843.957981,VS0,VE2\r\ncontent-length: 2577\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2577,"size_decoded":3184,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 64x64, components 3","md5":"0c5ab9417431f6cff445fae479d61195","sha1":"6bd290c97a0e931d477794a384bf4ad79a8fbbc2","sha256":"6bfae48de35e34cdb3c78028d6f29cb97c5ecefec4ab1d79a778e8c528ca5953","sha512":"b8fa3a5c673a6956e69e9bf65cef66aa19fcf07173be9a01fee12d7166e500dc4d4858bc6ef950cbb71cb504334fd68f252bdfebc2e5cf0b2b0e975fa707343d","ssdeep":"","tlshash":"27511a17438856c6fcb18f7199d14e033bced2a1563aa5be02c90fc18223aa8dd31d98","first_seen":"2026-10-02T02:33:52.737144Z","last_seen":"2026-10-09T18:01:45.027712Z","times_seen":14,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":1,"connect":10,"send":0,"wait":55,"receive":1,"ssl":299},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/community_assets/images/items/1480120/49e0a464dd370aa33875fffd0fe220ab5ba00707.png","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.614Z","timestamp":1791568842614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:03:00 GMT","end":"Mon, 21 Dec 2026 11:02:59 GMT"},"fingerprint":{"sha1":"35:27:95:F1:7A:87:90:C8:D5:F1:A9:04:B3:07:6D:A6:FD:D3:2C:C7","sha256":"D8:4F:7F:70:8F:7A:7E:8B:84:AD:3C:28:69:F1:A7:43:EA:B9:82:9E:88:6C:DF:63:E3:60:FB:48:13:0F:C3:63"}}},"request":{"raw":"GET /community_assets/images/items/1480120/49e0a464dd370aa33875fffd0fe220ab5ba00707.png HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Aug 2022 11:03:34 GMT\r\netag: \"63021106-1d8a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 369984\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270068-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1791568843.663817,VS0,VE1\r\ncontent-length: 7562\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7562,"size_decoded":8046,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"8124eeffc996fc2a150cee892bfeb85f","sha1":"49e0a464dd370aa33875fffd0fe220ab5ba00707","sha256":"bd7157f05d43067d0dfa6cd1b5d4c87c1246738c81610bfd0394f743f2ec9ffa","sha512":"db5e40e6a082886e9efe7ba10513049b6656357eb1d87540ee083315bce71604ce86dc235b038b4646639145b911be2b2c9721130d7367ab4179aa34a1db5133","ssdeep":"192:bhgN9T5Y0Fucve/Nr3wFUX0q/OUVNQ4rA/uF5n6l33V7:FkIBQUXNVaAbnS3t","tlshash":"81f19ff5758176443b39d0f6aeca2cbe0e3b8f258ae48387897b38494430f09244779a","first_seen":"2026-10-02T02:33:52.915206Z","last_seen":"2026-10-09T18:01:45.03017Z","times_seen":14,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/images/footerLogo_valve.png?v=8","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.629Z","timestamp":1791568842629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/images/footerLogo_valve.png?v=8 HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 22 Sep 2026 19:37:43 GMT\r\npriority: u=5,i\r\netag: \"6ab2d907-e99\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5huWWfzGkfalvXmoYNvDChWFUj0dTZ4kaPKMZnYjBHGA0rip%2BNSG%2Bzc2hJUAbARuo0GQg0KgovkeZ71WOe67ZDthyerth3B9Jt9TajJvQFoSO%2FByOi9k%2BKHGtuBA0ZjH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f49529b5456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3737\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3737,"size_decoded":4427,"mime_type":"image/png","magic":"PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced","md5":"1626f52addb7c56fe3679d82108c62e9","sha1":"2b414092d66ecff528950093a655f755c3c7f3b5","sha256":"ae9f6c61e25d15882bf57bde193d10d375bd315c9741cabda11d700fd1bb7dd1","sha512":"05548831477cc421556c404f3411f581e98a84ff2e699882cb4f5dca17d1c5f77b55ed2b8211eec32d0a4317be1c4ebc636277f840262491b753415f6f198276","ssdeep":"","tlshash":"0e718e669660b49e18cd70910dce2581eb543268c5673b3865d236cea8a1d179f2d071","first_seen":"2023-04-16T19:19:52Z","last_seen":"2026-10-09T18:01:45.032133Z","times_seen":3417,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/community_assets/images/items/237850/a1da4f27098f3b2713192e7131cee2987daff90b.jpg","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.847Z","timestamp":1791568842847,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:03:00 GMT","end":"Mon, 21 Dec 2026 11:02:59 GMT"},"fingerprint":{"sha1":"35:27:95:F1:7A:87:90:C8:D5:F1:A9:04:B3:07:6D:A6:FD:D3:2C:C7","sha256":"D8:4F:7F:70:8F:7A:7E:8B:84:AD:3C:28:69:F1:A7:43:EA:B9:82:9E:88:6C:DF:63:E3:60:FB:48:13:0F:C3:63"}}},"request":{"raw":"GET /community_assets/images/items/237850/a1da4f27098f3b2713192e7131cee2987daff90b.jpg HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 08 Oct 2014 09:02:29 GMT\r\netag: \"5434fda5-71f4a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 367918\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270068-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1791568843.854352,VS0,VE1\r\ncontent-length: 466762\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":466762,"size_decoded":467250,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2014:10:06 16:38:02], baseline, precision 8, 1920x1200, components 3","md5":"2798e821beed586b39c9ccf567431739","sha1":"a1da4f27098f3b2713192e7131cee2987daff90b","sha256":"df716dc982c53cbd67ae73cd67175e3838afadbcc5aada24a8977b541781b231","sha512":"735f3ec24cac47747ede131fc2056c8be6db9739fd64c04947d22d136c6d5e5c8a50927144d0f3f32eee911f2a8d80b8e36654c5eadce9ea48922702523b8743","ssdeep":"12288:rAXKhMnRDMf3nLfyhfgOrDek9wvuD2h2zD:smMRu3nLfyeADPkU","tlshash":"67a49e245e685691d8ca783786ecd861c3b31ec10e3222afffbc6a191f19c594de446f","first_seen":"2026-10-02T02:33:52.741124Z","last_seen":"2026-10-09T18:01:45.036339Z","times_seen":14,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/images/favicon.ico?v=8","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:43.310Z","timestamp":1791568843310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/images/favicon.ico?v=8 HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:43 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aAM7OcSoK7iXAdVdqCh6ffAKRw7Qm1ttS9YCx2%2BwvxQb%2BQ8zcAveQel3lnm%2FIU9hQhCAK4Llj3XWUBYXyfv7MK0MlsphjQY1rBFWUEVogR89g6S5izQAnlsAlqFda3Cx\"}]}\r\nlast-modified: Tue, 22 Sep 2026 19:37:42 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab2d906-969a\"\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\ncf-ray: a47f4956acc056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38554,"size_decoded":29651,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"231913fdebabcbe65f4b0052372bde56","sha1":"553909d080e4f210b64dc73292f3a111d5a0781f","sha256":"9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad","sha512":"7b11b709968c5a52b9b60189fb534f5df56912417243820e9d1c00c97f4bd6d0835f2cdf574d0c36ecb32dbbf5fc397324df54f7fdf9e1b062b5dbda2c02e919","ssdeep":"768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh","tlshash":"70038de82e4917aee9e2cf324adb6716237b4f88c0bc169742b07f193175a51c6d78c1","first_seen":"2023-04-05T07:02:49Z","last_seen":"2026-10-09T18:01:45.037689Z","times_seen":7069,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/cc5a62cf5","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sowmoscow.com/cc5a62cf5","date":"2026-10-09T18:00:48.042Z","timestamp":1791568848042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sowmoscow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 16:46:44 GMT","end":"Sun, 27 Dec 2026 16:46:43 GMT"},"fingerprint":{"sha1":"3D:53:78:1E:D7:E4:B5:A1:9D:AA:AA:29:4C:4C:65:4E:49:46:6B:8D","sha256":"5D:4B:49:1A:59:A4:4C:84:AE:D0:47:21:8E:AE:B0:B5:64:CC:8A:83:1B:99:16:1A:AE:9C:25:09:01:CC:AA:0C"}}},"request":{"raw":"POST /cc5a62cf5 HTTP/1.1\r\nHost: sowmoscow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 14\r\nOrigin: https://sowmoscow.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sowmoscow.com/cc5a62cf5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"doqr=1\u0026qrdata="}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cXunCq2F53viJGHZ0S78TiZVk9QNu8XWgvTf0p%2F72DKGU5bPD9P7MdDkJ%2BrQ0dywYtUa5RGzD5WovJauEFOBltVhyBB%2FpkeA0EtozYTUGNhwpVvXFqQ6VEIww2uPqwBE\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47f49744dd3b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75,"size_decoded":668,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"0609312177410f29594287a37e5de995","sha1":"8b3bcc271630850b498ff6bf9fa9e0a9b7343ee4","sha256":"f517899d7e804159f82d2aa74aed800476d25ca188e3c559faa32b9984b6956b","sha512":"786f47a9711ff66b5322d5aceed054213ca8e935ac664ac3cac59b950fbf12524a8db1dfd3794a9ff1b536290977104f21c2cf72cca65ab5f21a4c136344fcca","ssdeep":"","tlshash":"86a012f120c94400054002904016a026eec40886402450d4e4ac00644c7f2d026088b1","first_seen":"2026-10-09T18:01:45.039972Z","last_seen":"2026-10-09T18:01:45.039972Z","times_seen":1,"resource_available":true,"data":null}},"time_used":985,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":985,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T18:00:41.775Z","timestamp":1791568841775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/ HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2FUj1LGyuaVk7azQ4j9hzv5RCCMu1oWvQ9jLsxztU5Ebmfrj4K9MK6NgSJHxsQEIMNSNnspcZCGjH1vNhk57j6%2BCcGW9GkV0HCLfJ%2BUx%2BEto58KDdIXIKsfLTwLxSPVK\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a47f494d1a2b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53207,"size_decoded":11858,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (708), with CRLF, LF line terminators","md5":"a3bfeb170cbb9c88841455e0484c949a","sha1":"9ca989b2bdf930b03b1bbb66580019e8d41a99d7","sha256":"f6996d599449229447033d78c8cc0d27cc5f7d5b28f612d86933abc7e07dfde3","sha512":"23a4b09c4ea7cddff815bbb5927179a3ca08654d0c4f3ad6665d17a7c42b3ff047e190a193641c00d604c8e0a283a634613c296a92b1c2115344ccebc208002b","ssdeep":"768:Y0rl5GcaoQdVoPCl6dBgKM44T3nI1b1hq1t3zHdmGBkb49fkA0VS3pok5LsEWA:YYGzwaMdBgKM44T3nh8k5LsER","tlshash":"a9332eb3d591483b072725e4b6632b7ff8b2429ad7035424fbe823d60bc9cd39b56506","first_seen":"2026-10-02T02:33:52.836577Z","last_seen":"2026-10-09T18:01:45.042568Z","times_seen":14,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/css/buttons.css?v=8","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.237Z","timestamp":1791568842237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/css/buttons.css?v=8 HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 22 Sep 2026 19:37:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gpe82CwgguqEQ%2BKGzgJ3uRy0e7qH%2BAUV%2FC6ub85hnapJei9Ca%2Fng1EK2oJF79PXRuvn%2B6UaMeGWoH3KgfD0cRkghMyHWCHPuokLs026hpz0NDgY652lBBKVqdq5YaPNe\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6ab2d8dd-92da\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f494ffaaf56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37594,"size_decoded":4628,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d702c96f0f926fa3c9e1c1e670e07d9d","sha1":"f02ab380f12b41693f7176947c6181e90dc229bb","sha256":"8b8a6867a1cad59cf47c8a8ab28256f6867d9a59b8f0efc74e64ab827908281c","sha512":"005be4035c075a0ffc778e01d17bfd9fbf0d409aea277e976f9d212a3191baac8192c1d382ad244762198816a414998da6029d3a63f39c0520bfdfa7841e4c4f","ssdeep":"768:1G2yYDO6XUvWEQU9H8TOzuWOMqWZRhcJhJ/J8:2ulMvZR7","tlshash":"83f2f09d728e70793727e2e0a2335fa4ae6550ad84670fdfb2f5f1bc43a60dc1521816","first_seen":"2026-06-26T02:14:11.65254Z","last_seen":"2026-10-09T18:01:45.043949Z","times_seen":36,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/profile/icon_block.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.572Z","timestamp":1791568842572,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/profile/icon_block.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-54c\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 31270\r\nx-served-by: cache-bma-essb1270034-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1733\r\nx-timer: S1791568843.899669,VS0,VE0\r\ncontent-length: 1356\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1356,"size_decoded":1759,"mime_type":"image/png","magic":"PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced","md5":"af6956710c76a4e84f255ca37a74d690","sha1":"3efc932ff4a921169c8f34537c16fa2f7f475869","sha256":"88847ba203d8c859877e3b6d95646dc46b35bacbc2935d71a5a87b52511afb8f","sha512":"831fccf7ceaf133dda8e1ef3a07d66efb899c4e37bbc2e57744a15fe81286fc465f2fb7bf9ee28227f6783acaa497604296e70a27e00f40fe833e8c53c27f6e7","ssdeep":"","tlshash":"6121d8e5e9506401c25ee5c604f3a023aa32c6c8c9f4e891eaefc4195cb43fa441edfb","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-10-09T18:01:45.044979Z","times_seen":474,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":40,"receive":0,"ssl":247},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.fastly.steamstatic.com/80bf8df64d41eff6ef2ea4f7939a2a93e884fbbf.jpg","fqdn":"avatars.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.627Z","timestamp":1791568842627,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 06:12:50 GMT","end":"Wed, 18 Nov 2026 06:12:49 GMT"},"fingerprint":{"sha1":"F7:B7:EC:30:15:85:8E:0C:D2:C1:E1:E6:13:0F:50:7F:10:DB:B3:BB","sha256":"B3:0D:07:72:5D:93:9D:92:7C:FD:0A:A5:C6:EF:E8:3F:3D:9B:C7:3A:60:CE:2F:5A:DC:34:1E:49:7B:1D:82:54"}}},"request":{"raw":"GET /80bf8df64d41eff6ef2ea4f7939a2a93e884fbbf.jpg HTTP/1.1\r\nHost: avatars.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AP6rU81t_xFIqUMcQ2qzyGZfcJ5VF7-4haqJZlyDPUN9txkG9qM43VCtPU4Gx4LNDMMNM9A\r\nlast-modified: Mon, 20 Apr 2026 00:52:49 GMT\r\netag: \"e15731c76da57ec7e1c5e98d04ca4a23\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 736733\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270057-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1791568843.949280,VS0,VE1\r\ncontent-length: 1035\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1035,"size_decoded":1634,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 32x32, components 3","md5":"e15731c76da57ec7e1c5e98d04ca4a23","sha1":"80bf8df64d41eff6ef2ea4f7939a2a93e884fbbf","sha256":"03ae9c13fdec7ad0e95061590e13f516918c44f6fb63cb2808daa4c4c4b8b59e","sha512":"1a653efe43d441417fba8b007c7a00a6bcf26bbe0e641d6ea640d4e2de2ea8af6be825f89b1fb9be264737dab194553348cb67338b3697269eef1d170815b6f9","ssdeep":"","tlshash":"7e11949d4a46e4c2fa7c0cb2e1384cf15edad7160be2699f0dc96d8134b3a24ca25a10","first_seen":"2026-10-02T02:33:52.885146Z","last_seen":"2026-10-09T18:01:45.045668Z","times_seen":14,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":271,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/first-logo-1.png","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.632Z","timestamp":1791568842632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/first-logo-1.png HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 22 Sep 2026 19:36:58 GMT\r\npriority: u=5,i\r\netag: \"6ab2d8da-fb90\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uW8NxrKpNbIEBh%2BcRCfPtGpCVHolUoXKA%2Fo3uPsvg9Ud0YKYkFnJJ536nx4Fyu8wG6zDiFkaJNZXVrj7m6cdmYdH%2FuR%2FMVjhib9YoHSqtZFb1kCvceIF6T4hNnfhVxIu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f49529b5356ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 64400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64400,"size_decoded":65092,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"7ff90b07752572a132fe8b392b0e57cb","sha1":"49f980604007f61267720f25cc21cd41f1980bf4","sha256":"588870126f329a1e5f83b9b1cc14782f7ebf1f4dd85e412781be56d617a2e7c5","sha512":"95e90ba3c6babf66d523539d61e472903d15d4aae188fda05ae9a5568b9ad8059ab37ac9359e07b1f672f6b33e24d6d8992f4e60f3f30f830af11c1542320a6d","ssdeep":"1536:FoWh+B/udMQEU8AzVB2U8ckH2caZoYBCiqTpp:mWyuuQ782VBTOwuDVp","tlshash":"ee530249dcd19cc2e7e867b31605aa8ab7ea23f333c489016b715dd77b16790b34b904","first_seen":"2025-04-21T12:22:25.060132Z","last_seen":"2026-10-09T18:01:45.046338Z","times_seen":102,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/fonts/MotivaSans-Medium.ttf","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.691Z","timestamp":1791568842691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/fonts/MotivaSans-Medium.ttf HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/css/motiva_sans.css?v=8\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 22 Sep 2026 19:37:15 GMT\r\npriority: u=3,i=?0\r\netag: \"6ab2d8eb-1e490\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iw4SH3FHc8zvhwzB2NKkppEObGdEOgztXJbq7pFxLp9Rtvh31vSMvxH3WMqk7%2BwL6Bv5fKwVKQxywSG%2BHy24QSGujD1t4fn3x27awmqo4YFGaLglzXwNZU5yA4VnWGkO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f4952cb6156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 124048\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124048,"size_decoded":124756,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaSans","md5":"2d64caa5ecbf5e42cbb766ca4d85e90e","sha1":"147420abceb4a7fd7e486dddcfe68cda7ebb3a18","sha256":"045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f","sha512":"c96556ec57dac504919e806c7df536c4f86892b8525739289b2f2dbbf475de883a4824069dbdd4bb1770dd484f321563a00892e6c79d48818a4b95406bf1af96","ssdeep":"1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9","tlshash":"86c35c06f706d709dd240e3df9a1a3a9b358f8a57b1fcb0fa6856d65fc8e0852a441cc","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-10-09T18:01:44.946538Z","times_seen":7242,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/images/btn_header_installsteam_download.png","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.843Z","timestamp":1791568842843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/images/btn_header_installsteam_download.png HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/css/shared_global.css?v=8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 22 Sep 2026 19:37:31 GMT\r\npriority: u=4,i\r\netag: \"6ab2d8fb-123\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQSwrhoS7mZhbVLLXrKm2gtZ3fwU78k5Db3b%2FFO0%2FtjWv7GyKlxsSGoHZQ5xRWs998FFNl3r5a6WR7TiKcp67VF9bG6I2qpmgPzPtwCosL1kFtbz1JPuwHPOBirgO17h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f4953cba756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 291\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":291,"size_decoded":976,"mime_type":"image/png","magic":"PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced","md5":"a2796187c58c7e948159e37d6990ecc2","sha1":"4209cd85add507247f9ce5a87a8c9095b54ee417","sha256":"23341256db7f44b1f3811880fa2bae6b7748bbf6b62c544a162e38cf0d5c5082","sha512":"5ef103b8398507495c2708df8fcd82bdb763b1d580aaaa6cacfb805614764277c19e8ece5d890a8aafc004fc8c25e3ab2e67d6fbf373c432a9a0d7c36fa0890f","ssdeep":"","tlshash":"83d0ebf3a3e86d79fb52fe97d10180e0465fcaeb6004877889c3880447a81f880f2996","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-10-09T18:01:45.047067Z","times_seen":7701,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.529Z","timestamp":1791568842529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 09 Oct 2026 18:00:42 GMT\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":1390,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a9c505989beae39b2b4acd69790edbf8","sha1":"7fc09e5116a9d1351d7d1b52c76c790250bbf28f","sha256":"98c7383bf34fe5b6e36fe044d2ad34d9749bdd8c06012d460187ee93e60acda8","sha512":"59e4b52e7b47577faa18c41c4b3dfb678d706f40d277cbac58a35f8907c74ef2c4058e2a226b4e85d90ef83d90e291ea6b9cdfae9a23a4bafd2c59bc5ac6b517","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+qTYg4aR6NDO4a3qO4f:vywfydyGy63gy/yFhyR73xpmj3U8f7N","tlshash":"b5a1ed91006f9104ea431dd627cf7e32ad8e51856082e27d6ffd2dca6cdbd23122874c","first_seen":"2026-10-05T19:34:14.213729Z","last_seen":"2026-10-09T19:47:19.017833Z","times_seen":255,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":33,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/skin_1/arrowDn9x5.gif","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.561Z","timestamp":1791568842561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/skin_1/arrowDn9x5.gif HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/gif\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-44d\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 58641\r\nx-served-by: cache-bma-essb1270034-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 2911\r\nx-timer: S1791568843.661441,VS0,VE0\r\ncontent-length: 1101\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1101,"size_decoded":1504,"mime_type":"image/gif","magic":"GIF image data, version 89a, 9 x 5","md5":"ef8ee66b9461c0317eaab1827eac53bc","sha1":"24cf37bea83d4357c8481218f4c2c2acd74bc73c","sha256":"f2cc9ee07ca40866b840f1a4d780c4ab75d91bfdbe215c0f7251c0d76cfbad7c","sha512":"6386f06d466b9722ac3ba0e5224225032682c43de7d6fb096630d6ba54adba8fe7450d236ffd14b4fa2b481481ea98623c919b49e507c22912877e9476bfcded","ssdeep":"","tlshash":"6c1130cdbad2f841315cefc62cfb502b9a16484248f4e895f8da8c2e4d245b5951a6cb","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-10-09T18:01:45.048813Z","times_seen":1346,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/skin_1/notification_icon_flag.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.573Z","timestamp":1791568842573,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/skin_1/notification_icon_flag.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-46c\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 76275\r\nx-served-by: cache-bma-essb1270034-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 2890\r\nx-timer: S1791568843.892986,VS0,VE0\r\ncontent-length: 1132\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1132,"size_decoded":1535,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"c16c711ef60ca0c08b2491375e085adf","sha1":"8c43a6de3a2b11502477e1671d9a145da9001743","sha256":"aee447b0f589300598aeca0216f3e29458f0869fca5bbfea34f02183aa460cca","sha512":"1870c7327e4783caacb2349e5526a83476cf3e99002c37032b32f7903b5f3536efa7c24532e057c367624562139e0ab9a7a47bc64ecbaf94327abf3391c7383b","ssdeep":"","tlshash":"c521964efa262880455ce54528eac057eb17050096f1e93a7ceccc278c706f1649d2c7","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-10-09T18:01:45.049472Z","times_seen":527,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":39,"receive":1,"ssl":249},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/1399ad157/ffc79/4167a2b.png","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sowmoscow.com/cc5a62cf5","date":"2026-10-09T18:00:43.325Z","timestamp":1791568843325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sowmoscow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 16:46:44 GMT","end":"Sun, 27 Dec 2026 16:46:43 GMT"},"fingerprint":{"sha1":"3D:53:78:1E:D7:E4:B5:A1:9D:AA:AA:29:4C:4C:65:4E:49:46:6B:8D","sha256":"5D:4B:49:1A:59:A4:4C:84:AE:D0:47:21:8E:AE:B0:B5:64:CC:8A:83:1B:99:16:1A:AE:9C:25:09:01:CC:AA:0C"}}},"request":{"raw":"GET /1399ad157/ffc79/4167a2b.png HTTP/1.1\r\nHost: sowmoscow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sowmoscow.com/cc5a62cf5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:43 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jjd1zl5U3e%2BSYY4IJFVI3KTtHY8OtrRhIIEIQbMsbSyVDlmugbPS%2BcgfouD6y5MzfltA533jXo5AqC%2Bmj6Vr%2BIJs5nwr0iRcvrGuuZyRzPLpoDHZiBjeLk2Nw3NEA%2Bq1\"}]}\r\npriority: u=5,i\r\nlast-modified: Fri, 09 Oct 2026 18:00:43 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f4956cfbab509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34036,"size_decoded":34658,"mime_type":"image/png","magic":"PNG image data, 772 x 528, 8-bit/color RGBA, non-interlaced","md5":"4a6b43164090dc1a221f2d7bd0c56ea3","sha1":"154726540b3c2dbcca5cdf44b11dbfbbb5d4a05f","sha256":"43973368888f9aab0db294b5e7e3a895dce570da0c248949447c8eaf19d64256","sha512":"82d3b255cdedf61eed2324f8da1ad3855ca5da76c52fea35009d0bad505794dcdbb818cb9c0f8c17c0a385ff099c365f34ad6d9ce740e46de044a5f4bc3b3f9b","ssdeep":"768:r6VWlfZnpNqIBRMp0rHRXKZ8pYAff6mFrmbsXShlYB0gGb:AWxZniInRNKZ8pYAqmFpXIlYB0pb","tlshash":"ebe2d043f6eeda02efbfa324f4f0a00b99095b31458171f6cd77589a956c68348f18da","first_seen":"2023-11-20T16:02:36Z","last_seen":"2026-10-09T18:01:45.050394Z","times_seen":7,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/economy/emoticon/butterfly","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.563Z","timestamp":1791568842563,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /economy/emoticon/butterfly HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\ncache-control: public,max-age=604800\r\nexpires: Fri, 06 Mar 2026 00:22:49 GMT\r\nlast-modified: Thu, 26 Feb 2026 00:00:00 GMT\r\netag: \"4bb5f83d21949df7d6afd634d606c091\"\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 159887\r\nx-served-by: cache-bma-essb1270034-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 121\r\nx-timer: S1791568843.661907,VS0,VE0\r\ncontent-length: 1828\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1828,"size_decoded":3858,"mime_type":"image/png","magic":"PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced","md5":"4bb5f83d21949df7d6afd634d606c091","sha1":"15cc1c19032fb18b8312cfc1b7b72f61df11479c","sha256":"bba06557d9259a9fadd0b5a1e1b4686f2e5168a378b850783a0e970180503364","sha512":"16ed0ca3244a58a6fbc534b75fa404355a2f2f146934129c65748faf879cdde6be0bf1ad2d32351016ec6e5409671ab6351e75316050cfe4a4c1f8fd0d6bd1f7","ssdeep":"","tlshash":"c431e98dd9215c81d48c9d5a38f74a1fa7278490d4e3a8367ddf88016d6437b921e1cf","first_seen":"2023-05-25T20:38:59Z","last_seen":"2026-10-09T18:01:45.051247Z","times_seen":42,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/community_assets/images/items/208140/89b14641eb987f9158e71335ebd659feab442ff5.PNG","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.564Z","timestamp":1791568842564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:03:00 GMT","end":"Mon, 21 Dec 2026 11:02:59 GMT"},"fingerprint":{"sha1":"35:27:95:F1:7A:87:90:C8:D5:F1:A9:04:B3:07:6D:A6:FD:D3:2C:C7","sha256":"D8:4F:7F:70:8F:7A:7E:8B:84:AD:3C:28:69:F1:A7:43:EA:B9:82:9E:88:6C:DF:63:E3:60:FB:48:13:0F:C3:63"}}},"request":{"raw":"GET /community_assets/images/items/208140/89b14641eb987f9158e71335ebd659feab442ff5.PNG HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Mon, 24 Jun 2013 15:56:23 GMT\r\netag: \"51c86c27-38eb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\nvia: 1.1 varnish\r\nage: 327645\r\nx-served-by: cache-bma-essb1270068-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 9\r\nx-timer: S1791568843.942931,VS0,VE0\r\ncontent-length: 14571\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":14571,"size_decoded":15056,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"64c81fe431727bb11ec479db27aa8d39","sha1":"89b14641eb987f9158e71335ebd659feab442ff5","sha256":"9bb70b212fe9ee548b7cb1e82ddc2d6bfcbbb2e044c00222874c4114a0a45732","sha512":"4a5659c3a7dddf7989f4eecbddf54f8a8e9c383d52521b732d22baf78dec8486a1ddbfe389e8d6ea66f36a8533dbba44416d94815b2dadb88dbfa7c40cecd067","ssdeep":"384:QJXE05iqFRdUWBeA2fPKjwxjrbIaJekCBd:M35lZBBcgO/nekCBd","tlshash":"0c62c0338930fe4f662bf4d0d6ce4332f1a96b2915353d74604ae14e9ea982f67631b4","first_seen":"2024-09-22T15:43:14Z","last_seen":"2026-10-09T18:01:45.051913Z","times_seen":19,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":1,"connect":11,"send":0,"wait":13,"receive":0,"ssl":293},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sowmoscow.com/cc5a62cf5","fqdn":"sowmoscow.com","domain":"sowmoscow.com","tld":"com"},"ip":{"addr":"172.67.217.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.694Z","timestamp":1791568842694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sowmoscow.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 16:46:44 GMT","end":"Sun, 27 Dec 2026 16:46:43 GMT"},"fingerprint":{"sha1":"3D:53:78:1E:D7:E4:B5:A1:9D:AA:AA:29:4C:4C:65:4E:49:46:6B:8D","sha256":"5D:4B:49:1A:59:A4:4C:84:AE:D0:47:21:8E:AE:B0:B5:64:CC:8A:83:1B:99:16:1A:AE:9C:25:09:01:CC:AA:0C"}}},"request":{"raw":"GET /cc5a62cf5 HTTP/1.1\r\nHost: sowmoscow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cDHhwsY%2F0K%2B%2F%2FskygQByorwxsb40U0dRj1P5d%2ByAXAi93Icw29WdDhL23DTKS5N0G%2Bfhq1RMswGNfonoxDxNoasGBk00E3qD1%2FLB21r6cuqQBjCtz2jti%2FI1OVxdSiPQ\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47f49530efeb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123469,"size_decoded":12750,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (44163)","md5":"3df0b0e37682515bdcf093c0d9026a63","sha1":"901cb2ef972bb4a7c5c5b212233e02c5e0f000d2","sha256":"98ab41765223dd71d425e3c94a2d69724197f1383b6c8c7bee26df7a9760bd51","sha512":"bf0da5788d7d2e9048e09ae8470337c0127fdb0a6c1b6a4ad951b7c0f2578a4241e063cb10eb5de1188a314040db95c430b18d39a0d02f4df4eb1b95fb5794dd","ssdeep":"1536:xmqb1cfh8vbzdJOk7Miniqb1cfh8vbzdJag1n3CDJMejG4Uy1kqF0L+69RIgBuM9:ui","tlshash":"73c308ba80926b3a421f89c4313a0faf24eb876ef98360877bad43c55fc5d47ed15161","first_seen":"2026-10-09T18:01:45.053231Z","last_seen":"2026-10-09T18:01:45.053231Z","times_seen":1,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":233,"receive":355,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-um.com/lp/sst-cgj/ibqkztxe/fonts/MotivaSans-Thin.ttf","fqdn":"s.team-um.com","domain":"team-um.com","tld":"com"},"ip":{"addr":"104.21.39.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://s.team-um.com/lp/sst-cgj/ibqkztxe/","date":"2026-10-09T18:00:42.948Z","timestamp":1791568842948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-um.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 14:47:41 GMT","end":"Sun, 27 Dec 2026 14:47:40 GMT"},"fingerprint":{"sha1":"CC:80:6D:65:1F:42:E2:5B:B1:C4:7C:7C:73:92:EA:79:61:43:2E:06","sha256":"9C:F9:01:95:6A:25:BE:9C:89:6C:0D:16:A3:50:BD:E5:F3:F4:DA:D7:17:46:74:79:D8:41:AC:D7:9D:86:86:5B"}}},"request":{"raw":"GET /lp/sst-cgj/ibqkztxe/fonts/MotivaSans-Thin.ttf HTTP/1.1\r\nHost: s.team-um.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-um.com/lp/sst-cgj/ibqkztxe/css/motiva_sans.css?v=8\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 18:00:43 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 22 Sep 2026 19:37:19 GMT\r\npriority: u=3,i=?0\r\netag: \"6ab2d8ef-1cfd0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hGUa5%2BzF7gKfUZBeohcnUTVshK8O1CzMpe5QX5%2F5sjQWZ3TXrwCBrOavIlXXs%2FW%2FIP3dRlpGdA1OzY2hkj%2B568tWgfn1KugvWk7l3WsqW4s6OpeqRAsLhQ%2FPScy2uVQ1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f49546bf256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 118736\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118736,"size_decoded":119452,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansThin4.015;Plau;MotivaSans-T","md5":"ce6bda6643b662a41b9fb570bdf72f83","sha1":"87bcf1d2820b476aaeaea91dc7f6dbedd73c1cb8","sha256":"0adf4d5edbc82d28879fdfaaf7274ba05162ff8cbbda816d69ed52f1dae547f6","sha512":"8023da9f9619d34d4e5f7c819a96356485f73fddcb8adb452f3ceefa8c969c16ca78a8c8d02d8e7a213eb9c5bbe5c50745ba7602e0ee2fe36d2742fb3e979c86","ssdeep":"1536:GAAAAAAAgsAAAYgIAAAAsAuErzzzz6mfzzVCA9zzzzzzdp/koLAGXImE98YfgNi9:kErZDE9BfgNiX9k3SDHewStfNwS0fj9","tlshash":"b5c34b06f702eb4add691e7ca59163c5b728f4a13b1ec30f95c66d5afc8e1a60d022c9","first_seen":"2023-04-05T04:16:14Z","last_seen":"2026-10-09T18:01:44.95277Z","times_seen":5054,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"s.team-um.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"s.team-um.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}