{"report_id":"87c1ec7f-c09f-4a77-8416-72dd61446881","version":6,"status":"done","tags":[],"date":"2026-04-14T05:04:05Z","url":{"schema":"http","addr":"gift-everyone.cfd/id=5947221648","fqdn":"gift-everyone.cfd","domain":"gift-everyone.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.105","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"gift-everyone.cfd/id=5947221648","fqdn":"gift-everyone.cfd","domain":"gift-everyone.cfd","tld":"cfd"},"title":"Steam Gift Activation","dom":{"size":39452,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3584)","md5":"622156262705734d41e4d824bc98370d","sha1":"aaf310649eef6f39b887d42b600dd43187e88260","sha256":"a95899e0a12a6733357fbad3948a68e2ac941feecc3535e4c18720fcc97f51d4","sha512":"e5695b3b74e3a95c55a562f902c6f560f69e4fbc2ceff2bc4c65889d2805cc694fa2a0da7d4a0820813bc1d2ccf3247b9914330a942819dd6e280377e9f2cf9c","ssdeep":"768:EU6cJDg4PR4Otk+vD65IXEBueQLBVRnsRP8SZ343p82lfxabUjVglbsHjZPIZKSV:EU6cJDg4PR4Otk+vD65IXEBueQLBVm8S","tlshash":"5a036421a8f3c03b459ab2d5b167ab3e9653cb4bd5048f9477ec02a4efd6bd14a2305c","dom_hash":"domhash2a9cc50769bbb87a50fece9ca956791b","first_seen":"2026-04-14T05:04:15.2863Z","last_seen":"2026-04-14T05:04:15.2863Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gift-everyone.cfd/id=5947221648","fqdn":"gift-everyone.cfd","domain":"gift-everyone.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.105","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-19T05:04:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-14T05:03:40Z","timestamp":1776143020,"ip_dst":{"addr":"Client IP","port":57674,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 8","source":"{\"timestamp\":\"2026-04-14T05:03:40.116391+0000\",\"flow_id\":1885094611281400,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"62.60.226.105\",\"src_port\":443,\"dest_ip\":\"172.18.0.8\",\"dest_port\":57674,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400007,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 8\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-04-14T05:03:40.091640+0000\"}}"}],"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-14","alert":"Hunting_JS_WebAssembly","trigger":"store.fastly.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=vNpZeOuePA4R\u0026l=english\u0026_cdn=fastly","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.cloudflare.steamstatic.com","ip":{"addr":"23.36.77.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-11-07","domain_rank":239946,"first_seen":"2020-06-12T06:10:44Z","last_seen":"2026-04-12T16:05:54.957921Z","alert_count":0,"request_count":1,"received_data":2849,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-04-12T22:43:11.971821Z","alert_count":0,"request_count":1,"received_data":868930,"sent_data":461,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.akamai.steamstatic.com","ip":{"addr":"23.36.77.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-11-07","domain_rank":129555,"first_seen":"2014-04-02T16:39:27Z","last_seen":"2026-04-12T14:09:58.775134Z","alert_count":0,"request_count":1,"received_data":503638,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-04-12T23:11:18.280453Z","alert_count":0,"request_count":1,"received_data":470426,"sent_data":391,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"steamcommunity.com","ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2006-05-28","domain_rank":533,"first_seen":"2014-03-11T13:45:34Z","last_seen":"2026-04-09T02:19:32.736341Z","alert_count":0,"request_count":1,"received_data":38823,"sent_data":404,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"recaptcha.net","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-01-06","domain_rank":1074,"first_seen":"2012-07-15T20:16:42Z","last_seen":"2026-04-08T23:38:29.964735Z","alert_count":0,"request_count":1,"received_data":1767,"sent_data":406,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gift-everyone.cfd","ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"domain_registered":"2026-04-11","domain_rank":0,"first_seen":"2026-04-14T01:05:52.007378Z","last_seen":"2026-04-14T01:05:52.007378Z","alert_count":24,"request_count":12,"received_data":359075,"sent_data":12283,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery UI:1.11.3","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Prototype:1.7","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]},{"name":"script.aculo.us","description":"","website":"https://script.aculo.us","common_platform_enumeration":"","icon":"script.aculo.us.png","categories":["JavaScript libraries"]}]},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2026-04-08T23:15:10.657227Z","alert_count":0,"request_count":1,"received_data":3401327,"sent_data":397,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-04-12T22:33:20.808909Z","alert_count":0,"request_count":1,"received_data":89165,"sent_data":410,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.steampowered.com","ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2000-08-09","domain_rank":25571,"first_seen":"2015-12-16T22:18:52Z","last_seen":"2026-04-09T18:55:36.955401Z","alert_count":0,"request_count":1,"received_data":212,"sent_data":603,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"store.fastly.steamstatic.com","ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":81796,"first_seen":"2024-10-31T18:26:40Z","last_seen":"2026-04-08T12:19:49.559061Z","alert_count":1,"request_count":45,"received_data":4771872,"sent_data":21236,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"recaptcha.net/recaptcha/enterprise.js?render=explicit","fqdn":"recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0912c5ccf11b70afed2c15707fa1de9a","sha1":"6078f4b08ea2bc19fd8bd17b66ca3f23b74e89a5","sha256":"9754e7e173e0d6fedad135c662d575b6a6812ac966227c71fab3356ed2248e6e","sha512":"cb055b29576c598ae84f5fad4a9a2b4a9eaf2ff316bf697d7bff31f9c7aaf4823e1d19a959b9c93f17818fb0b9050eb8469ffa1b1ed64da8cc1a4d3bfc079800","ssdeep":"","tlshash":"e51112b21705b03e0b7319a5d2facab1e842701cb11c49eca502da843e6acdbce05a99","size":1067,"data":"","first_seen":"2026-04-14T01:03:22.792586Z","last_seen":"2026-04-30T11:48:18.280435Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gift-everyone.cfd/id=5947221648","fqdn":"gift-everyone.cfd","domain":"gift-everyone.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"37d2fc5bf732a8fb1eb7b58404da918e","sha1":"0486c4671e7d34854637de8ebc6d4343e55b3d02","sha256":"8ef332d0faaf1f60522b6af583814374e4c0ed3d352b93e68e89b5a123eacbf5","sha512":"7aa42443356bfa5bb67c3470be916e3d1e3e03ea6ace1c5e276cf17370df940acb3026d72033f6ee7eeeb46f505d308d58755336f65ada21c3b66c0c27423ad1","ssdeep":"768:WFbVisO0v3M9vpCAmWuG69x/iLrCmCN8M1+8U68USBnGICjCDqb16yL6Qpu0fTv8:6hN5324A4WOV3kE6GL2DqUa5fTO+2","tlshash":"4f33a69a27c336abdc8d121a535a5a7daad8dd030bd08474a6883f74313cd348ff598e","size":51468,"data":"","first_seen":"2026-04-06T12:57:07.15982Z","last_seen":"2026-04-17T15:36:38.135814Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","fqdn":"gift-everyone.cfd","domain":"gift-everyone.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"917fb49d13cfd88259f340715d38faec","sha1":"79468fd20c7e15f49fa2cf53d006f1cc4d05758f","sha256":"1e257ecd1f1a3f9bce32fb391ad21e0b3822b6eeb51c075fe1ef070e38e286c3","sha512":"717c933d485a22c8db15c49bfe823f77a3c99d72198c284136adcdcb4a8ecc46abbe355ee481630eb24620777d3a029e6d5b476435b0b30e495c239864380191","ssdeep":"","tlshash":"cb01264e30a354105ba7e57d65cb5634f120a103a00acd0d3ddd9241afe3a7ab190b8c","size":834,"data":"","first_seen":"2025-07-06T23:42:41.739758Z","last_seen":"2026-06-03T09:45:37.00722Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=vNpZeOuePA4R\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d98b4d93770002c4e566be1ccfcf028a","sha1":"4f927947ec87887e209b4366982d9805f94de97e","sha256":"c4c141f9d32d32b42455b4317f7a03677c1483b4854c76d977044128d75a4402","sha512":"d9d9beccc9a16bc6deb0e59643c23a7764e61e052b86ab02e5a24b6f7cfb4d3182a38d8babad64f9cf21861e41786a56ed3b722c02e7f8cfc498ba032d253570","ssdeep":"6144:2FNa32VjkUHzaMMFeVaQDGq+a2BdM82srXuvn0ty0ME71aTk0xO:x1MMFeVaQDGq6M82sr+yy0MaaBO","tlshash":"dbd43bc87161f42957a351b5146f100bb73a291a984c86e4f268dcda38f9d8ea13ff3d","size":648054,"data":"","first_seen":"2026-04-07T23:13:46.42166Z","last_seen":"2026-06-16T01:49:36.343045Z","times_seen":125,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-14","alert":"Hunting_JS_WebAssembly","trigger":"store.fastly.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=vNpZeOuePA4R\u0026l=english\u0026_cdn=fastly","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/shared_english-json.js?contenthash=377512acf3b9a558ed42","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"51c676595b5cdc19739d5e2819980ca3","sha1":"94d0410174f2378dc85e04b642057ed1f840ee3f","sha256":"c47878c839fd5b2f0c4efc8aef82908d3fe95bb65395ba706b9b7e3d13108159","sha512":"684b75e948cefe97a311c22ead95bd2886e2452928446dcc2bb75f13d7406443f282d157a9251613989d479cad6b98651f4d8ef5245e22969ca5b148f0575b90","ssdeep":"3072:9C0JiCCpaeCYQErjIr3fNZPdzr6oQxETtvorj0UAI0N4/h:M0NwaeJQwIjfNZPp6oQxQM","tlshash":"5944390f9a4d6d76078703e7ba0b6ca35bb040df63461c219eda4d4f11da78ea33b958","size":261806,"data":"","first_seen":"2026-04-08T08:46:40.894154Z","last_seen":"2026-04-20T18:54:16.064311Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=NXam5zydzNu8\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","size":93636,"data":"","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-08-09T06:47:43.941246Z","times_seen":37508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=lz_99vci25ux\u0026l=english\u0026_cdn=fastly\u0026load=effects,controls,slider","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"973ffdf6f722db9bb1e350b4c673f365","sha1":"a6c7d4331056cd37569fac3ee5f4b4e0e09b38cb","sha256":"658b209483f3b09ceabfab105ce9f15078138d646ca0e9abee2033606c852b19","sha512":"28ec015dd5dd389a56008983d64c69fbedf4c091e4478c8cf25c34db310516bc8cd1e0804fb554e26dfffe9b724b24b91df8ee1a5ed68153bc6bead655de0311","ssdeep":"1536:Ek3m7kQD+mlspqh2NrFIei4f9wiIVWaLcrZmKw1wF/IS58H1nRtW460kfR+U:zr4gO4f9wiJucrZE1xUJ5P","tlshash":"8183850d37ab262580dbb06a5f5f454db238411b1806dc58b8ad83d48fa9f3861f7fb9","size":87011,"data":"","first_seen":"2024-12-13T15:16:33.754695Z","last_seen":"2026-08-07T14:54:04.53334Z","times_seen":1667,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=tvQi85mXnRZH\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8146fd62dea9db3da12b85d0b3559fdf","sha1":"05dd708beea63c8a8fda3073c005dcaeed81ff9f","sha256":"99613a4590fe4087b95c7d56aed1e79340d563113c5cb117a2bed5ddf7a174e9","sha512":"4d1d1fb0392748fe358d6008a5dba0c77fabfe21a5c5424828cf6316cfc2800c9e5715e526dde89279bfd934eaf34a6a2e7a7db300c0c4c8b4d23363895113be","ssdeep":"384:4AGUcz6olWUtpanMMY5CqHB0tRZM7ZEQx/kjHBc2gdXf7h6oq:4AG7z7WUtpwYZB0TAEosjHCNZ7A","tlshash":"f0b2b5a9fb5e1276817a321c2b5f24cf327c88f8710a9c827d70255c7a9655e03e6f4e","size":24290,"data":"","first_seen":"2026-04-02T12:53:50.667508Z","last_seen":"2026-04-14T14:33:09.696944Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/6976.js?contenthash=950809c565dd5b14a79d","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"331a5e40dcbe17f05042d552023d3456","sha1":"aa34fc43374d7ab96700fcd8554c1eb357d5a320","sha256":"c5cecb1c9f713463d0532e4a8f796ef049a420ac15d18141eac151bd59395766","sha512":"33694f7928142d596e3458304fef11e5e293af43bcfb6e5194a3249122e3e1d300e4541b7e49e32b0163a6db396e1f928b93f363c79209089a1cd198b5bdcdfe","ssdeep":"96:+TuSm7FqsjdubrViVR3KAFRvlC2mkIQGTQI1PxQig8oGMbBuVEI:+87A+zlC2aDQi","tlshash":"64e1118a2858393d479b3397ef8b4456d5f4918ab01c1f8268e5963d0f3a7d0939b70f","size":7344,"data":"","first_seen":"2026-03-12T11:25:03.509073Z","last_seen":"2026-04-14T05:04:29.167987Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/dynamicstore.js?v=iQ2CGpHeNwDH\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"61fc20c9c414aca7eec66c5e51ba623f","sha1":"86f9cd85e5497e841acc514323c54cbd625ed404","sha256":"877809cc0ca0956f26fbf908ac98e0e8889b6129d89ddb529789ba0aed74b3b6","sha512":"b8f79b74acc084c06f61bc7e1cd07780d213f22c09680db59d3f5f5ae8e80616ffb9ce274d6d44af8e3088304ca817b5afc8d5fce97badb9a051375130aebc6e","ssdeep":"1536:fZ/cXRZyjTDWWN+6xG3QA4/4xM8c3pvM6ELoc1neK39O6kCZRWXN8pxHf+YuMxZY:R3FA4lYeK39OQgTqIp","tlshash":"94931ab8a72e532e67b221fcad69a1c9f37c48f535468890bce4221874e4c4f53b5e1d","size":89713,"data":"","first_seen":"2026-02-25T13:20:52.960783Z","last_seen":"2026-06-03T09:45:36.959645Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/prototype-1.7.js?v=npJElBnrEO6W\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e92449419eb10ee96c56d803d2baa43","sha1":"5a2be7055866b8f35bd852d466ff590251a56d89","sha256":"a655fc19da796630bcf37112ccf749898e98c99e1b25bccef0bf3573665195e5","sha512":"19d0c715d50abf41cccf0a96bf9c4673c5059d8a0a9edddc00c243ae44e403e1b3641c8e7c3e57b58746423b0679af216398648a6a1a4f50f394a9c15104fb32","ssdeep":"1536:Pe/hr8bCUSFPlpV7N+XS+st304cM9FmKZFDlYUo7pKMaV/6FzKKVA8MjjOH2X1Ix:PIr8bCBPlp0u9F6UodjaVbX1oYVpwxA8","tlshash":"99f3309c7de66035822bf13e5a9f418cf27980171408ed55b89c85a46fb0d3896fafec","size":163315,"data":"","first_seen":"2023-10-31T01:09:46Z","last_seen":"2026-08-09T02:12:59.9159Z","times_seen":2592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/redeemwalletcode.js?v=cU8ZLoLtUa1P\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"714f192e82ed51ad4fe46f3f662873e9","sha1":"3fdc7571fc39939623aa8738d4f7893fe9cfbb68","sha256":"f262fff9b99c9e509ab6274988b09868da1d0e929c148227c7cba5ac0099b753","sha512":"ff68535bc298506b0c80ceba7cd091b33d471c7fa1cc10c0f52d2050edeada803779a6aefe6116f74852f8ff375b99c64eeba6633e794ff5045a73c82c21cb52","ssdeep":"384:OemLFWeQVifvuGwNhA5BXbZ2z1XSxgbmRxefs5rAXdoMaTMpwsSWWrBa3cGqpb:OJBXUz1skfNq99rkEb","tlshash":"d65284e6ff1e23056631022e19ce0899f6bd587595088db1fc6c877573a0c9c682eead","size":13849,"data":"","first_seen":"2024-12-10T13:14:44.764704Z","last_seen":"2026-07-31T15:18:13.677183Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/dselect.js?v=sfK6UJLNp872\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c34095fcf02fc37500535c01c105959e","sha1":"54ce027b82d18356f535df4fd3cc879c01cb62a3","sha256":"6b9f2a2c6be7ec51b932534e3500b4bfd0f4017bd48231e8e8a7c948d151c976","sha512":"976775275db96f70544bedf2052099cc080d7abeef9296b2f1fb441f9f25f2ab8ad0f8292ba94279b9305593ff3a00cbd27fd96d92a485a21014986c4580321f","ssdeep":"192:MRfE8jdnRqi49tazp+SJ2GvZg2gECs148kgsaWEE+WTH1VbEIhksB:MhOdLSwCbkg8f1VT+Q","tlshash":"79229650b32c17e910be04bfcdc59de8656ca9f68c0358a2bd9881ac75d45ab13fdc1b","size":10005,"data":"","first_seen":"2025-12-17T07:06:50.845749Z","last_seen":"2026-08-04T03:11:41.765032Z","times_seen":167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/shared_global.js?v=gOyfgA0bHRkL\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef83e1b59bd5643f035f1b05bd973442","sha1":"137f311ba26169563a0b2ff16415a78207361e5f","sha256":"187934abf67c5e39b0ac2af4b62ebafe1f65ef3d134ea452bf5f1cebc75b211d","sha512":"f180f61e9a010dc2f5953c189760be8cab698702523246132cc8fd6fe29febaf05c65e58b237dcd9eb6f5e49dbd453d95d09350375304b9eb641f7035e37b708","ssdeep":"1536:hvZkXRW6Q2hNJRNhUmciMQzoscmDecTV8iqD3YHI1Sp6D3QgQHrMTAQaOlXkwRig:U/5UmciZos1DecSP7YHVgOSXKA1","tlshash":"e8e319d5eb7c212a897a302ddd4f50493a7e5832b00468297c5e94d86ae0d7e43bbf7c","size":156896,"data":"","first_seen":"2026-03-12T11:25:03.469166Z","last_seen":"2026-04-28T19:32:18.123004Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/sales_english-json.js?contenthash=ca011045dee70bed3958","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"517a3353a4069cc4b1f729ad7d036565","sha1":"85ca032b95b44bf077ef829bb1436ca32341a935","sha256":"370618b81f894e1dbd69b5dcdb08a353464f54e57875e509753092f77cd2e832","sha512":"6860da01900311b0eafd43ffc2c5f1845dd453d571174c82f8684c45535094af657b44ce3d3649c22d55dae20e91799629c82b62d5603f4924a1c9956d476620","ssdeep":"3072:xs4PKfx/onsTjdlClNDArfKrxbJOggpsHAHC:lmgnylCMm5vQRC","tlshash":"1d34241f56c00337073b0696797db0c7b1788ca763c4a476aec7a13a136b919f1a66bc","size":234711,"data":"","first_seen":"2026-01-07T04:15:05.803511Z","last_seen":"2026-06-16T01:49:36.515228Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/gTpTIWhbKpxADzTzkcabhXN4/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e99a11c277c9d1b0b51c4a67cc3d7b69","sha1":"a2a8e66d64b163cf0080e902774207c325c1f4e1","sha256":"6432e3b9dc0f3e73b04605259cc0f5200e7a3dcf7488e27921a3b3c3c5a5a672","sha512":"966cb8cfbd38ec2e950af506194cdde48ae4e7c02ee6742a6a282be20f333f58f7fddf2c87d26d3f5dedac11399159ea03ef44a34dd96ed908b672ec88ea9696","ssdeep":"12288:CMHc63LVkzXYW+VS4HojkEda8yw2UzqbklH1JBcl:7HB3LVkzIW+VZoj3d7yw2507el","tlshash":"62054de939137a759362b5f214b32049a37e581ac448099e72d9c4f12ffb809b0f6e77","size":868023,"data":"","first_seen":"2026-04-13T15:36:41.874381Z","last_seen":"2026-07-18T21:01:58.403079Z","times_seen":31649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/manifest.js?v=VWHoUUnZEI3s\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5837666d5e8879613c039a0193734dcd","sha1":"943b28db845022f9cad8cb2f13921989a76fc43d","sha256":"1a39b1624b9614f9405bfa965c6442debba9cebd1c5ead99f65bbf94a47edf96","sha512":"216c6ff252f47c4838a46b12953c5f288fe7f0051b078ec571ff0166844e98d3bc55ab69b828b5f22a73e3f13383faabe26d48664a5445b080dec91597cbd1ce","ssdeep":"384:+JREUCPxf+PdsfHwm/dtxTeEgu+sKw+dA6pV1vDhnfjWSYyqXcwn9zbHRAw1XA3L:SnCJmuwlsKw+2ehnVYrRZbHRAw1XmLn","tlshash":"0bc2397dbf3cafda796c18d7add687b460982c1da855148280edf3150207e247b12eaf","size":26850,"data":"","first_seen":"2026-04-07T23:13:46.428Z","last_seen":"2026-04-14T05:04:29.173712Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/main.js?v=bhe8idkqvbAk\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec72f1c56d0c747871b669c81681efd9","sha1":"d7fa6456c24c04f5718a31ef50bbbd85b7dde9ba","sha256":"caa01721e5802764d1a7f7e1c853f6b0a0c3c7113e23d6f7af383f3b29d663d4","sha512":"1b8ea71d3aa07a10de360d10759e72052bdbb264f45bb8aaedc6d9b739db764ad8358edf2768e60977b9dea42e580513a32b8e95a6c41e1f7b98daa9886717db","ssdeep":"12288:seYxQ/PK0eQiiD5D8AgNICPAEYVejygDEV7jTHYTctu0UKvn+0c0BdT9Q8SdFGGi:snxQv5D7gNICoEYUt0BEMpCKblIP/4zt","tlshash":"a3754cc036eafad2f79846d24236119bf3285cb9f91d84d0f3e4e86434895cda366f94","size":1636949,"data":"","first_seen":"2026-04-07T23:13:46.433979Z","last_seen":"2026-04-14T05:04:29.195478Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.11.3/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c811575fd210af968e09caa681917b9b","sha1":"0bf0ff43044448711b33453388c3a24d99e6cc9c","sha256":"d2f0522008bff05c6434e48ac8f11f7464331436a4d5d96a14a058a81a75c82e","sha512":"d2234d9e8dcc96bca55fafb83bb327f87c29ae8433fc296c48be3ef8c9a21a0a4305e14823e75416951eecd6221f56fbbb8c89d44b244a27be7b6bea310f2fd1","ssdeep":"6144:zK8SyEGdEXdujYWUl/plq/pGlgFld1HmcI48VirY7IXtu2Y5W5ZbHtQTiTXu5bgs:fljHmcI4q5W5FHttCnuJq7CjhBK1","tlshash":"b0a4a689f39c266a857a325d5c2e41ce723c8076d60158bfbc5c59dc29e883c42bbf79","size":469790,"data":"","first_seen":"2023-03-07T01:03:14Z","last_seen":"2026-08-08T21:36:14.51594Z","times_seen":3369,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"93995e3bb315bc0695254d745e88d5e1","sha1":"206782432cbbafa347e32cd5c19775a701faef83","sha256":"39cbe8d0785370b4ebda08f844727ac3a6fc5cab10bd26cbeda5dc36ff4166d0","sha512":"b6e8c9675e186e53a54a40e45ee78f6025b0ddc3f067f6f0bef67fef3ce5f30cce2d0be18b7457e05ff397ef8c301ab5bb07fe53fcf61e11f65de9f872f361d0","ssdeep":"192:h3ug34ZknOPADCO0izmla3uCXDJiC7ZEb9k9Hdqyo0WPn4PRP/4PaP34Pjc+8ubK:h3ug4R4svlBEJpocOFJ2eu+i9","tlshash":"ec826591f73d20ae407ab3be896d2388b33e40b65161f8757d7886743a4e4970392fe4","size":17568,"data":"","first_seen":"2026-02-18T02:21:57.511284Z","last_seen":"2026-07-06T14:55:45.214808Z","times_seen":595,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/shoppingcart_english-json.js?contenthash=146859bc56e69e9f2b9d","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"432b7567b3746da80f417706ac9875ea","sha1":"a104ef860bce667630ccfad9b979af6061882b31","sha256":"c91142de9b7f5810cdfaead2a8d29e64df659ab9ea07b52765b07fa89dfd95e0","sha512":"e181983360b370728fcd68a68cfbc431e2f13c7286092d9ed53a4e697697c3626718c5af898d21e0bf6d2823c508a20e6b7067be45d11265ada91ed6cc56e7e6","ssdeep":"384:+46r1G9IBaL79GTdyIqgYjgpJVB5ZYTzvbjDp4gwZ:Q8IBaL79GTdyIqgYjgpJVB5ZYTzvbjDc","tlshash":"bf82734acd6553776de34ba0bed6a64f83b4a2d20274f9904fc8056d324f6c284bfd88","size":19158,"data":"","first_seen":"2026-02-08T10:13:57.113192Z","last_seen":"2026-06-16T01:49:36.319477Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/auth_refresh.js?v=w6QbwI-5-j2S\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3a41bc08fb9fa3d925bfbde6930f313","sha1":"06bf235bae87234c3091962f40415b43492652e2","sha256":"8d764adbee3ffe7e61342a5b3be4c853c26c0a2c1e3eed1e63bb68cfee7944b0","sha512":"0ed874c12447dd3d84c745235d05c2b83ef47125f928aa87cf507a9189be1ff13a7f249ec207b09c5c64498991be4269039c18ff81bc26be92b78a5f4b6b1b55","ssdeep":"","tlshash":"6b31b9e09e8c0435137f009bbf2fbacd306e54725ed894a5bf05893a6c5830f97a5985","size":1527,"data":"","first_seen":"2024-11-16T08:41:12.910961Z","last_seen":"2026-08-09T02:12:59.929927Z","times_seen":2263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/modal.js?v=7G8uHr4fXaTj\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec6f2e1ebe1f5da4e35ce187b96f63b4","sha1":"9a3ba01d1a0b3a6972bea477b6c4ba647b1daa88","sha256":"30e30ee53b2d8690f2386fda09ab68f33236d28251752360188e536c866ed3a6","sha512":"a2f7f2c063f87aa2b4817136eecbf57cbdd8bd5f455c6bf741cbe95f8b7a7b8748eefa147231e50c4a8f3d5c01edd5d9929438beab6c5c6fd77f0edd569696ac","ssdeep":"","tlshash":"da51011adf6c063ae57d425fbc29eb99367d4432b10e1df0c86d2b5814e0e9b1687d28","size":2802,"data":"","first_seen":"2024-12-10T13:14:44.772055Z","last_seen":"2026-07-31T15:18:13.670443Z","times_seen":177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/main.js?v=wiAgKBaqWusf\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da397c611660034142c006cfec5919c7","sha1":"f324aa1becc65d1586c1831c18e4e45ce2362021","sha256":"d2dbe964068179178825d83a225345ef69f26a7493027a40cb1b4ca44ed88b88","sha512":"d2578310dc318d6002dec2abbeb80a97e1388ca1474dd87e38a00a9f1b24c463126e88d9ab14449388a647fce5fc62c6955f3f8b0e544cb178cf42fba7e04c75","ssdeep":"1536:UqB6CKVhEGSF77Rdr+DUfMpauSa4ZRxwKOLWxLm46mMPe8RbKmV7ydSxk+XBwWP1:bBuLY1Szb","tlshash":"5d9309d4f7ad01399479203cad1f90897a3e5871b900a8627d4e8a9874d092f43bff7e","size":88998,"data":"","first_seen":"2026-04-08T20:24:12.979098Z","last_seen":"2026-04-28T08:08:12.082838Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gift-everyone.cfd/751a2f557504500d5d07031a.js","fqdn":"gift-everyone.cfd","domain":"gift-everyone.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7408b90ccddf50ebe44958bfc105f9e","sha1":"888dce7a3827e7ec0d1716404c7eda1b27f08ceb","sha256":"93fa2a34ef1ae939547f7d8f51b7e26e03b42ed4cd1011c239d8db404034e1b3","sha512":"0318a1bf2c9f619f7ae9b66809272ccaf48c40976b67c44c827b11acd92b6215a8793a03dfa4b00b3c8f15d42b9c2c707edc47930f7155076659b2ad64b2b9fc","ssdeep":"1536:ysjCfN7Bm+EvlKHMwAU6aURNpi4CcYVM6+8s5qv+c4zTSeBjSh2GJ8rNWRLC/zGq:KFmrO6R7Ic3S6vs1K0hNzbAoNpBdmLz","tlshash":"4144b80067c0ec5c23979b7a732fb5d5f56e0a9f2c84494be111fca066aa217faf9530","size":258804,"data":"","first_seen":"2026-04-06T12:57:07.122649Z","last_seen":"2026-04-18T08:10:47.270189Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-09T05:50:29.634819Z","times_seen":138604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/main_english-json.js?contenthash=e074c23d1ff93816e368","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d074ff62bcefbf9c87be7ab3f22dd6b","sha1":"636aaef68849cfe8e3237a53dfa55653d572b5c5","sha256":"b912001c4dbf0addeaa9abb1c89b1459f66b402d03a3a82e494ec19e07d621cf","sha512":"79c5d35a4521ffb6b3828ca744d6ac9949de1578d0c3cd415ac3d27737794cc23b1b1dcc72d55098e4ecec61a3d8e8de49031c959e40a84500a93cb12e004b71","ssdeep":"1536:V7aiXrllRVji5XfFLNh4iAEd2zj7CHrp5ALMRmdQw1:5HlR5i5X9LNh4iAEdgj7CHULMRmdQw1","tlshash":"2f93190feb19097b978702b77e1e66e771e5c0e733e11c60bec8842f12466c5622fa59","size":89023,"data":"","first_seen":"2026-03-20T07:57:43.226912Z","last_seen":"2026-04-28T08:08:12.268467Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/marketing_english-json.js?contenthash=9973d03d5687799df4f2","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc7dc7dc8d69ece48a1fa2e27ab0233a","sha1":"6fa797d8ceafc10394f141f0f2527a9f60840edf","sha256":"e87591bf137b6e6d08c85a9b9292ee1c233e14875e63778d44a9eb8fb3ef8d88","sha512":"00f22454435c1bb10fa30ee8fcfb56fac934068297cb9714bed56db31d52ee2bc21c405bbcf46b7c49944a9acb32fc1bdd8a72e85c2573bbe3baeb245ea27820","ssdeep":"768:MUHLm+blpNN7VMxsgE3kSd5/VQ472IZTUgZiQZ:MUrmaN7VR37d5/VQTIZTTZ","tlshash":"cbc2d4b9f1376a2603cedef82dbefb4511bb80680708795d54685d2eb0f63d449328e8","size":27644,"data":"","first_seen":"2026-03-27T05:21:26.733205Z","last_seen":"2026-05-05T02:06:29.759046Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=lz_99vci25ux\u0026l=english\u0026_cdn=fastly\u0026load=effects,controls,slider","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/javascript/scriptaculous/_combined.js?v=lz_99vci25ux\u0026l=english\u0026_cdn=fastly\u0026load=effects,controls,slider HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Tue, 14 Jul 2026 21:19:13 GMT\r\netag: \"lz_99vci25ux\"\r\nx-integrity: \"sha384-ypv8apRisCy5MbfVW/xJQC0n6ooV6krjmoShQQ8SJNZ3Q5Z+m92YpP2BXkzevTqz\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nage: 437754\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 5127\r\nx-timer: S1776143021.644300,VS0,VE0\r\ncontent-length: 21131\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":87011,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"HTML document, ASCII text","md5":"973ffdf6f722db9bb1e350b4c673f365","sha1":"a6c7d4331056cd37569fac3ee5f4b4e0e09b38cb","sha256":"658b209483f3b09ceabfab105ce9f15078138d646ca0e9abee2033606c852b19","sha512":"28ec015dd5dd389a56008983d64c69fbedf4c091e4478c8cf25c34db310516bc8cd1e0804fb554e26dfffe9b724b24b91df8ee1a5ed68153bc6bead655de0311","ssdeep":"1536:Ek3m7kQD+mlspqh2NrFIei4f9wiIVWaLcrZmKw1wF/IS58H1nRtW460kfR+U:zr4gO4f9wiJucrZE1xUJ5P","tlshash":"8183850d37ab262580dbb06a5f5f454db238411b1806dc58b8ad83d48fa9f3861f7fb9","first_seen":"2024-12-13T15:16:33.754695Z","last_seen":"2026-08-07T14:54:04.53334Z","times_seen":1667,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/v6/logo_steam_footer.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:41.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/images/v6/logo_steam_footer.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:22 GMT\r\netag: \"649bb1fa-b1b\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 45433\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1776143021.707405,VS0,VE1\r\ncontent-length: 2843\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2843,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced","md5":"41e851f8e42b6bf3414278871e93e8a2","sha1":"a3811c7e1157f77950ec1f0558293bc90e432e82","sha256":"399f74c4e69eac8b59b149293f9a573955fef0a62b242cfa70346070013e0966","sha512":"f3c3549f1390b52791196e6f19584cbd4c4db2b51fef78c9c607c944079fed69b75e8f88594c3d647f2ddc29f282bf41be455be328ab27c091b4a37c41b00965","ssdeep":"","tlshash":"8051d94ef9325d6074ccf94128ee23571a735b40ea928561ecdace9b06352f9880e5c3","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-08-05T12:54:36.52881Z","times_seen":2738,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/main_english-json.js?contenthash=e074c23d1ff93816e368","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:42.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/javascript/applications/store/main_english-json.js?contenthash=e074c23d1ff93816e368 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\nlast-modified: Thu, 19 Mar 2026 16:37:34 GMT\r\netag: \"siWpotKEDa37\"\r\ncache-control: public,max-age=259200,must-revalidate\r\nexpires: Sun, 22 Mar 2026 16:38:34 GMT\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:42 GMT\r\nvia: 1.1 varnish\r\nage: 183907\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 27014\r\nx-timer: S1776143022.300270,VS0,VE0\r\ncontent-length: 89023\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89023,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65369)","md5":"9d074ff62bcefbf9c87be7ab3f22dd6b","sha1":"636aaef68849cfe8e3237a53dfa55653d572b5c5","sha256":"b912001c4dbf0addeaa9abb1c89b1459f66b402d03a3a82e494ec19e07d621cf","sha512":"79c5d35a4521ffb6b3828ca744d6ac9949de1578d0c3cd415ac3d27737794cc23b1b1dcc72d55098e4ecec61a3d8e8de49031c959e40a84500a93cb12e004b71","ssdeep":"1536:V7aiXrllRVji5XfFLNh4iAEd2zj7CHrp5ALMRmdQw1:5HlR5i5X9LNh4iAEdgj7CHULMRmdQw1","tlshash":"2f93190feb19097b978702b77e1e66e771e5c0e733e11c60bec8842f12466c5622fa59","first_seen":"2026-03-20T07:57:43.226912Z","last_seen":"2026-04-28T08:08:12.268467Z","times_seen":73,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cloudflare.steamstatic.com/store//about/logo_steam.svg","fqdn":"cdn.cloudflare.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.77.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:41.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare.steamstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 13:31:15 GMT","end":"Mon, 18 May 2026 13:31:14 GMT"},"fingerprint":{"sha1":"73:8F:D2:4E:C1:10:80:84:2F:5B:31:F5:28:C0:FB:85:C3:29:D7:8E","sha256":"2E:84:BA:21:7C:CE:09:EB:70:6C:70:69:93:C7:02:F8:BB:23:29:D2:CC:80:51:94:07:6F:D8:5E:F8:24:7E:36"}}},"request":{"raw":"GET /store//about/logo_steam.svg HTTP/1.1\r\nHost: cdn.cloudflare.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/svg+xml\r\ncontent-length: 2522\r\nlast-modified: Thu, 14 Nov 2024 00:19:00 GMT\r\netag: \"673541f4-9da\"\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-grn: 0.5d4d2417.1776143020.1e31eb94\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2522,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba1eadfd02abb260074971789870ce10","sha1":"e329edad609b0c2b7a567ff1964f59833d401c66","sha256":"9720a2b19519e0d51f44f91d7dd0cd57ccee7347efe38f5815acc6d984f79a8b","sha512":"063843a5043e832af172fc6609a288adb98bbb1da1fe82f8bb370c314b04748f5d50e2ed75400e8a653ef40761e64687a8eb99e8f4f613f879a109dcfffa7d22","ssdeep":"","tlshash":"de51f1150309ebfea9c90658962925c171d8dcefb074b0d0b7ff2817e15ccd0a68c6ea","first_seen":"2025-01-01T12:10:22.113504Z","last_seen":"2026-08-03T18:49:16.601632Z","times_seen":807,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":83,"connect":1,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gift-everyone.cfd/751a2f557504501452040334504b5e43","fqdn":"gift-everyone.cfd","domain":"gift-everyone.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:46.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gift-everyone.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 02:24:17 GMT","end":"Fri, 10 Jul 2026 02:24:16 GMT"},"fingerprint":{"sha1":"CD:F9:2A:89:00:B4:27:81:5A:84:EA:08:73:CB:4D:75:1D:BF:1A:2A","sha256":"D2:B5:02:E8:BF:09:52:6E:99:A9:DA:20:7A:9C:48:C6:82:B2:B7:AB:4B:8E:98:B3:3F:B1:35:89:3E:F2:20:3F"}}},"request":{"raw":"POST /751a2f557504501452040334504b5e43 HTTP/1.1\r\nHost: gift-everyone.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gift-everyone.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.LXrU1lm4MniN_MHCfEm0GrEq6qyOGRNK.Pt6IT-NvNJZwtxoG.MLXRguliAN-UiIb6yi2oA8q1pdXdFtI8Z1JSwugzAVzom-28p3G2ojQnLDnvDKTPHBiQaYrK6-MuhHbSiZlZH9jv7esCE0x1zO22u0ckbbvKOiOVDNYCc1k01QU9Dl7KCvOgAjsta6dszOTxWOeVHAFaGJeZJKKvTSQnhbO448-FmWxXgboCMULWp6shT1_MWlzL_EHUzJX1Mjra2NH690UWbtEulkORYvfjAdlyz0bwaeMPiUXQ53GMpmg8BjSe0aUprmUZrmJ40nGF1w7XZEs0k0CkKX8._v_tQtH_oqVgd6cYnWQURQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODgsInNlY3JldCI6IjFjYTQ4NTNkM2NmYjk4Nzc5NTUyYTUzZmE4NmNlNjRhIiwic2VydmljZSI6IlN0ZWFtIn0.MXWjkMN77nPUhK5p3SHoVOcBdRiwjQpO1DoBDFm26Wg; timezoneOffset=0,0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 201 Created\r\nserver: openresty\r\ndate: Tue, 14 Apr 2026 05:03:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-09T06:47:15.333274Z","times_seen":180911,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gift-everyone.cfd/a578f6fcea17657d6481f19e42037c78282141786b3b/b7319bb4efc51dfc6ac33a2923701914088cfe717565.css","fqdn":"gift-everyone.cfd","domain":"gift-everyone.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gift-everyone.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 02:24:17 GMT","end":"Fri, 10 Jul 2026 02:24:16 GMT"},"fingerprint":{"sha1":"CD:F9:2A:89:00:B4:27:81:5A:84:EA:08:73:CB:4D:75:1D:BF:1A:2A","sha256":"D2:B5:02:E8:BF:09:52:6E:99:A9:DA:20:7A:9C:48:C6:82:B2:B7:AB:4B:8E:98:B3:3F:B1:35:89:3E:F2:20:3F"}}},"request":{"raw":"GET /a578f6fcea17657d6481f19e42037c78282141786b3b/b7319bb4efc51dfc6ac33a2923701914088cfe717565.css HTTP/1.1\r\nHost: gift-everyone.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.LXrU1lm4MniN_MHCfEm0GrEq6qyOGRNK.Pt6IT-NvNJZwtxoG.MLXRguliAN-UiIb6yi2oA8q1pdXdFtI8Z1JSwugzAVzom-28p3G2ojQnLDnvDKTPHBiQaYrK6-MuhHbSiZlZH9jv7esCE0x1zO22u0ckbbvKOiOVDNYCc1k01QU9Dl7KCvOgAjsta6dszOTxWOeVHAFaGJeZJKKvTSQnhbO448-FmWxXgboCMULWp6shT1_MWlzL_EHUzJX1Mjra2NH690UWbtEulkORYvfjAdlyz0bwaeMPiUXQ53GMpmg8BjSe0aUprmUZrmJ40nGF1w7XZEs0k0CkKX8._v_tQtH_oqVgd6cYnWQURQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODgsInNlY3JldCI6IjFjYTQ4NTNkM2NmYjk4Nzc5NTUyYTUzZmE4NmNlNjRhIiwic2VydmljZSI6IlN0ZWFtIn0.MXWjkMN77nPUhK5p3SHoVOcBdRiwjQpO1DoBDFm26Wg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: openresty\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"41-0AeMVzV1pApYTMktTMxeiuYqqUg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gift-everyone.cfd/a578f6fcea17657d6481f19e42037c78282141786b3b/b2c283038dfc916c3ca844bd3c9898ba1f7f46cf1372.css","fqdn":"gift-everyone.cfd","domain":"gift-everyone.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gift-everyone.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 02:24:17 GMT","end":"Fri, 10 Jul 2026 02:24:16 GMT"},"fingerprint":{"sha1":"CD:F9:2A:89:00:B4:27:81:5A:84:EA:08:73:CB:4D:75:1D:BF:1A:2A","sha256":"D2:B5:02:E8:BF:09:52:6E:99:A9:DA:20:7A:9C:48:C6:82:B2:B7:AB:4B:8E:98:B3:3F:B1:35:89:3E:F2:20:3F"}}},"request":{"raw":"GET /a578f6fcea17657d6481f19e42037c78282141786b3b/b2c283038dfc916c3ca844bd3c9898ba1f7f46cf1372.css HTTP/1.1\r\nHost: gift-everyone.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.LXrU1lm4MniN_MHCfEm0GrEq6qyOGRNK.Pt6IT-NvNJZwtxoG.MLXRguliAN-UiIb6yi2oA8q1pdXdFtI8Z1JSwugzAVzom-28p3G2ojQnLDnvDKTPHBiQaYrK6-MuhHbSiZlZH9jv7esCE0x1zO22u0ckbbvKOiOVDNYCc1k01QU9Dl7KCvOgAjsta6dszOTxWOeVHAFaGJeZJKKvTSQnhbO448-FmWxXgboCMULWp6shT1_MWlzL_EHUzJX1Mjra2NH690UWbtEulkORYvfjAdlyz0bwaeMPiUXQ53GMpmg8BjSe0aUprmUZrmJ40nGF1w7XZEs0k0CkKX8._v_tQtH_oqVgd6cYnWQURQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODgsInNlY3JldCI6IjFjYTQ4NTNkM2NmYjk4Nzc5NTUyYTUzZmE4NmNlNjRhIiwic2VydmljZSI6IlN0ZWFtIn0.MXWjkMN77nPUhK5p3SHoVOcBdRiwjQpO1DoBDFm26Wg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: openresty\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"41-0AeMVzV1pApYTMktTMxeiuYqqUg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/6976.js?contenthash=950809c565dd5b14a79d","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:42.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/javascript/applications/store/6976.js?contenthash=950809c565dd5b14a79d HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\nlast-modified: Tue, 10 Mar 2026 22:52:37 GMT\r\netag: \"LUTUbuutZHYp\"\r\ncache-control: public,max-age=259200,must-revalidate\r\nexpires: Fri, 13 Mar 2026 22:55:23 GMT\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:42 GMT\r\nvia: 1.1 varnish\r\nage: 176386\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 26072\r\nx-timer: S1776143022.321682,VS0,VE0\r\ncontent-length: 7344\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":7344,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7181)","md5":"331a5e40dcbe17f05042d552023d3456","sha1":"aa34fc43374d7ab96700fcd8554c1eb357d5a320","sha256":"c5cecb1c9f713463d0532e4a8f796ef049a420ac15d18141eac151bd59395766","sha512":"33694f7928142d596e3458304fef11e5e293af43bcfb6e5194a3249122e3e1d300e4541b7e49e32b0163a6db396e1f928b93f363c79209089a1cd198b5bdcdfe","ssdeep":"96:+TuSm7FqsjdubrViVR3KAFRvlC2mkIQGTQI1PxQig8oGMbBuVEI:+87A+zlC2aDQi","tlshash":"64e1118a2858393d479b3397ef8b4456d5f4918ab01c1f8268e5963d0f3a7d0939b70f","first_seen":"2026-03-12T11:25:03.509073Z","last_seen":"2026-04-14T05:04:29.167987Z","times_seen":68,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/facOzSk.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:42.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /facOzSk.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Mar 2025 07:37:26 GMT\r\netag: \"4eb55dea22c7dc9f5311b0c45c147c1e\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: QfmhUlPSg7lPDdNzOx1tV9GTtBfMAKvtshYabhHW_p7z8vyxi3t6HQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 41730\r\ndate: Tue, 14 Apr 2026 05:03:42 GMT\r\nx-served-by: cache-iad-kjyo7100088-IAD, cache-hel1410029-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 55, 0\r\nx-timer: S1776143022.412407,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 3400538\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3400538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1792 x 1024, 8-bit/color RGB, non-interlaced","md5":"c80f191c16fb94755121ae1c8ecf0015","sha1":"641b3c5f37a4f47ad716a88281df6c1e5280a19c","sha256":"1b7cd1d0e92cc5fca6c904e3d947420ceb79f6491b023732b7489d7f33b07d87","sha512":"53b3933a62a0844449d0a79a1f9fe8d2f8d74f55236dde41e6270e4791eea90201f460ec06ee19fffd1a2869624ce622496b340487e74b0eff8b9eac74aa8625","ssdeep":"24576:l3EeyqmhqgQMyE50K5aufM5wTQI+K0CLfV2dX6CrzHtL:ur9AgnLMKT5aafc5rzH5","tlshash":"372533986249222288fabbc735f65f68d42c3d7257430d1f400e18a6bb375bd297e1b7","first_seen":"2025-08-02T11:18:27.21739Z","last_seen":"2026-07-19T16:07:05.91369Z","times_seen":39,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":68,"dns":27,"connect":13,"send":0,"wait":14,"receive":219,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/fonts/MotivaSans-Bold.ttf?v=4.015","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:42.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/shared/fonts/MotivaSans-Bold.ttf?v=4.015 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gift-everyone.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://store.fastly.steamstatic.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/octet-stream\r\nlast-modified: Wed, 28 Jun 2023 04:07:10 GMT\r\netag: \"649bb1ee-1e3ec\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:42 GMT\r\nvia: 1.1 varnish\r\nage: 13464\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 268\r\nx-timer: S1776143022.340207,VS0,VE0\r\ncontent-length: 123884\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":123884,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 22 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansBold4.015;Plau;MotivaSans-B","md5":"6168553bef8c73ba623d6fe16b25e3e9","sha1":"4a31273b6f37f1f39b855edd0b764ec1b7b051e0","sha256":"d5692b785e18340807d75f1a969595bc8b1c408fb6fd63947775705e6d6baa66","sha512":"0246cee85a88068ca348694d38e63d46c753b03afadf8be76eca18d21e3de77b495215ed2384d62658a391104f9e00df8605edb77339366df332c75691928efb","ssdeep":"1536:M+s43BGZsrolB21EJ4q+GIbdSW7VvCtQXjPM3mz1yxvjWRVIoFMe1V13836GKCnY:T1GZXlB2SUbxVv/zM3mZyxLUZGrSDfj9","tlshash":"a7c35b46b302e745fe754e3d62a69396b318f4a93b1fc30ba5857e75fc8a0a60d841cc","first_seen":"2023-04-05T18:36:18Z","last_seen":"2026-08-09T02:12:59.917349Z","times_seen":4018,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","fqdn":"gift-everyone.cfd","domain":"gift-everyone.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://gift-everyone.cfd/id=5947221648","date":"2026-04-14T05:03:40.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gift-everyone.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 02:24:17 GMT","end":"Fri, 10 Jul 2026 02:24:16 GMT"},"fingerprint":{"sha1":"CD:F9:2A:89:00:B4:27:81:5A:84:EA:08:73:CB:4D:75:1D:BF:1A:2A","sha256":"D2:B5:02:E8:BF:09:52:6E:99:A9:DA:20:7A:9C:48:C6:82:B2:B7:AB:4B:8E:98:B3:3F:B1:35:89:3E:F2:20:3F"}}},"request":{"raw":"POST /751a2f557504500d574655260c0103000b070404550d HTTP/1.1\r\nHost: gift-everyone.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 62\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.LXrU1lm4MniN_MHCfEm0GrEq6qyOGRNK.Pt6IT-NvNJZwtxoG.MLXRguliAN-UiIb6yi2oA8q1pdXdFtI8Z1JSwugzAVzom-28p3G2ojQnLDnvDKTPHBiQaYrK6-MuhHbSiZlZH9jv7esCE0x1zO22u0ckbbvKOiOVDNYCc1k01QU9Dl7KCvOgAjsta6dszOTxWOeVHAFaGJeZJKKvTSQnhbO448-FmWxXgboCMULWp6shT1_MWlzL_EHUzJX1Mjra2NH690UWbtEulkORYvfjAdlyz0bwaeMPiUXQ53GMpmg8BjSe0aUprmUZrmJ40nGF1w7XZEs0k0CkKX8._v_tQtH_oqVgd6cYnWQURQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODgsInNlY3JldCI6IjFjYTQ4NTNkM2NmYjk4Nzc5NTUyYTUzZmE4NmNlNjRhIiwic2VydmljZSI6IlN0ZWFtIn0.MXWjkMN77nPUhK5p3SHoVOcBdRiwjQpO1DoBDFm26Wg\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":62,"data":"pathname=%2Fid%3D5947221648\u0026search=\u0026hostname=gift-everyone.cfd"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=60, s-maxage=0\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"9760-XQKXn4heFrCHdPVhnNIuTH14PNc\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery UI:1.11.3","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Prototype:1.7","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"script.aculo.us","description":"","website":"https://script.aculo.us","common_platform_enumeration":"","icon":"script.aculo.us.png","categories":["JavaScript libraries"]}],"data":{"size":38752,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3584)","md5":"4f70efcf17e8a92df9fe1ffe0a9f9941","sha1":"5d02979f885e16b08774f5619cd22e4c7d783cd7","sha256":"763a984ed8ccf55807518204fd98c68dcfd83a591b4614dd7cfae8b8c9d85d04","sha512":"d2143dd4ebec60be21e29ff9463fc81cbb6e73654e46dba2761461c58706ec9f04f4925f1468a6170597a9cac3ddf625f9d640777ca74d51d718d0b4ccca2c65","ssdeep":"768:PU6cJDg4PR4Otk+vD65IXEBueQLBVRnsRP8SZ343B8ElfxabUjVksHjZPIoKYCxI:PU6cJDg4PR4Otk+vD65IXEBueQLBVm83","tlshash":"08036421a8f3c03b459ab2d5b167ab3e9652cb4bd5448f9077ec02a4efd6bd14a2311c","first_seen":"2026-04-14T05:04:15.293725Z","last_seen":"2026-04-14T05:04:15.293725Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gift-everyone.cfd/a578f6fcea17657d6481f19e42037c78282141786b3b/233e73f5e02a89abdd095648ab78522319d728708176.css","fqdn":"gift-everyone.cfd","domain":"gift-everyone.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gift-everyone.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 02:24:17 GMT","end":"Fri, 10 Jul 2026 02:24:16 GMT"},"fingerprint":{"sha1":"CD:F9:2A:89:00:B4:27:81:5A:84:EA:08:73:CB:4D:75:1D:BF:1A:2A","sha256":"D2:B5:02:E8:BF:09:52:6E:99:A9:DA:20:7A:9C:48:C6:82:B2:B7:AB:4B:8E:98:B3:3F:B1:35:89:3E:F2:20:3F"}}},"request":{"raw":"GET /a578f6fcea17657d6481f19e42037c78282141786b3b/233e73f5e02a89abdd095648ab78522319d728708176.css HTTP/1.1\r\nHost: gift-everyone.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.LXrU1lm4MniN_MHCfEm0GrEq6qyOGRNK.Pt6IT-NvNJZwtxoG.MLXRguliAN-UiIb6yi2oA8q1pdXdFtI8Z1JSwugzAVzom-28p3G2ojQnLDnvDKTPHBiQaYrK6-MuhHbSiZlZH9jv7esCE0x1zO22u0ckbbvKOiOVDNYCc1k01QU9Dl7KCvOgAjsta6dszOTxWOeVHAFaGJeZJKKvTSQnhbO448-FmWxXgboCMULWp6shT1_MWlzL_EHUzJX1Mjra2NH690UWbtEulkORYvfjAdlyz0bwaeMPiUXQ53GMpmg8BjSe0aUprmUZrmJ40nGF1w7XZEs0k0CkKX8._v_tQtH_oqVgd6cYnWQURQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODgsInNlY3JldCI6IjFjYTQ4NTNkM2NmYjk4Nzc5NTUyYTUzZmE4NmNlNjRhIiwic2VydmljZSI6IlN0ZWFtIn0.MXWjkMN77nPUhK5p3SHoVOcBdRiwjQpO1DoBDFm26Wg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: openresty\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"41-0AeMVzV1pApYTMktTMxeiuYqqUg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/dynamicstore.js?v=iQ2CGpHeNwDH\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/javascript/dynamicstore.js?v=iQ2CGpHeNwDH\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"YfwgycQUrKfu\"\r\nx-integrity: \"sha384-epYJpMxIw3cQwUjR8X50SrxJFgL1rZSbT1O93G53VFdnJyVwKYb5Qexh5WhdCaq6\"\r\nlast-modified: Sun, 03 May 1970 14:00:39 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1776143021.633905,VS0,VE302\r\ncontent-length: 23255\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89713,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"61fc20c9c414aca7eec66c5e51ba623f","sha1":"86f9cd85e5497e841acc514323c54cbd625ed404","sha256":"877809cc0ca0956f26fbf908ac98e0e8889b6129d89ddb529789ba0aed74b3b6","sha512":"b8f79b74acc084c06f61bc7e1cd07780d213f22c09680db59d3f5f5ae8e80616ffb9ce274d6d44af8e3088304ca817b5afc8d5fce97badb9a051375130aebc6e","ssdeep":"1536:fZ/cXRZyjTDWWN+6xG3QA4/4xM8c3pvM6ELoc1neK39O6kCZRWXN8pxHf+YuMxZY:R3FA4lYeK39OQgTqIp","tlshash":"94931ab8a72e532e67b221fcad69a1c9f37c48f535468890bce4221874e4c4f53b5e1d","first_seen":"2026-02-25T13:20:52.960783Z","last_seen":"2026-06-03T09:45:36.959645Z","times_seen":110,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/main.js?v=bhe8idkqvbAk\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/javascript/applications/store/main.js?v=bhe8idkqvbAk\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"7HLxxW0MdHhx\"\r\nx-integrity: \"sha384-BaC6pc7CkiqwPR8OG83s77kqbDnSHxcApqZcgQu2YkrMosVonBKeVq6iWSPnMYE5\"\r\nlast-modified: Sun, 03 May 1970 14:00:39 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 14 Apr 2026 05:03:41 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1776143021.690952,VS0,VE1238\r\ncontent-length: 425934\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1636949,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65373)","md5":"07ecd196fbf42b17b5c7e0bf6beeb6a0","sha1":"75ed47b534a2902ca3b0df5f74b423eaea0fe7eb","sha256":"4e54e35510554be72d214ccca4a6fd6e6404800c43f9ff097bcc1515ab3e33f6","sha512":"00d4f34759e85cbe1319db124bf0ae5327ff1986d113def791d13275ef2362959327689e271b073482a654b35742cb42c0d1f528174e428b06bbef150ec03fb2","ssdeep":"12288:seYxQ/PK0eQiiD5D8AgNICPAEYVejygDy:snxQv5D7gNICoEYUi","tlshash":"6b25d8c039eafa83b7a841d352361297f3244cb9f92d94d4e3e4e86434c85ce9766f64","first_seen":"2026-04-07T23:13:46.402066Z","last_seen":"2026-04-14T05:04:29.181593Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1251,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/account/wallet_icon.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:41.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/images/account/wallet_icon.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-d54\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 14 Apr 2026 05:03:41 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1776143021.703539,VS0,VE617\r\ncontent-length: 3412\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3412,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"59722f8b05d32484fbd8853cbf7859f2","sha1":"8c9a1b988324bb779bf273dcfb62e993103757ca","sha256":"fcbb90319848b9823c6829ed4abba0720f06674ae7e7ff762abe3b905dd3e24e","sha512":"a995853c47f43e3fc1291d6e2e1846b34a629d07d6189f33f79df84a9e381db87536a7b7ad183f123b30af9fc19bddb5367b987741d0ca3f1df86b849ff1a7ac","ssdeep":"","tlshash":"b1619ebfec20d0de99ee769209ec8202e7b4322c8646372880c1e5ed9022d075b59432","first_seen":"2023-05-21T20:35:46Z","last_seen":"2026-07-31T15:18:13.688659Z","times_seen":420,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27748\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-15851\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 352414\r\nexpires: Sun, 04 Apr 2027 05:03:40 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oHfNNsGzuP2DDSLhdSnTC93vEJr4Yv%2B8%2BLMLILbCmzKLk2JU9ByRQg7dBjSsAw%2B%2F%2FJz%2F5FsWMHDZtcbSPbQoKjfEiq1M5LlmJJUBs2EYcP7mw82wgfQafu3Ol7L80AfFzanvU60a\"}]}\r\ncf-ray: 9ec02a5739b35691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-09T05:50:29.634819Z","times_seen":138604,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":11,"receive":2,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 14 Nov 2024 00:18:58 GMT\r\netag: \"673541f2-e3e\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nage: 6193\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 88\r\nx-timer: S1776143021.676185,VS0,VE0\r\ncontent-length: 3646\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3646,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31aabe1e01f27b3b9b47d7265807afc2","sha1":"a430f5a8a81145215c41c3ba80929627e570d81e","sha256":"3a4d08139646d567a612f75b8179641c570d490f8013478d131266ed21f3d453","sha512":"60dfb140295124b3f6b57592504ca6006c22988bba82bf63c5559fa7f8da2aab7e163265abb2a312034875f95fa850bbacb620ecca6c56ea8e79689963cd31c4","ssdeep":"","tlshash":"f971b4cc17338be06595c27e1e7476d223b365a9e8b001e8a3920c202c0bfe69a64d75","first_seen":"2023-10-31T01:09:47Z","last_seen":"2026-08-05T15:58:46.233668Z","times_seen":2982,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/images/responsive/header_logo.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/shared/images/responsive/header_logo.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:12 GMT\r\netag: \"649bb1f0-2a6f\"\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nage: 12002\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 137\r\nx-timer: S1776143021.675846,VS0,VE0\r\ncontent-length: 10863\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10863,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced","md5":"a4e79c73ee13cb25b60fc4b0ba1f690c","sha1":"b690c31b2eb1b0eb085e91aaae7e79f03debe7c1","sha256":"6cb869df089146c12efb5e9c968e911c314842624ba6f052a11346ac734cadc8","sha512":"aad423119f410a655f0aa475d2fe692087d7262c3986ce71347981c5b60f6a10031d7050bf9b9aee4e7d84d814f0b8883c964028fcbe14ed3464602f3ba6cec3","ssdeep":"192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM","tlshash":"4722c06cfcc0c875958352ba3e27fb7043f93e10c44b86b86960e5a5365c8f4959d137","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-08-09T02:12:59.879567Z","times_seen":7532,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/sales_english-json.js?contenthash=ca011045dee70bed3958","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:42.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/javascript/applications/store/sales_english-json.js?contenthash=ca011045dee70bed3958 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\nlast-modified: Wed, 07 Jan 2026 00:15:22 GMT\r\netag: \"ig47zieJwAr2\"\r\ncache-control: public,max-age=259200,must-revalidate\r\nexpires: Sat, 10 Jan 2026 00:17:16 GMT\r\nedge-control: !no-store,!bypass-cache,max-age=259200\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:42 GMT\r\nvia: 1.1 varnish\r\nage: 179148\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 27211\r\nx-timer: S1776143022.298003,VS0,VE0\r\ncontent-length: 234719\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":234719,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64906)","md5":"517a3353a4069cc4b1f729ad7d036565","sha1":"85ca032b95b44bf077ef829bb1436ca32341a935","sha256":"370618b81f894e1dbd69b5dcdb08a353464f54e57875e509753092f77cd2e832","sha512":"6860da01900311b0eafd43ffc2c5f1845dd453d571174c82f8684c45535094af657b44ce3d3649c22d55dae20e91799629c82b62d5603f4924a1c9956d476620","ssdeep":"3072:xs4PKfx/onsTjdlClNDArfKrxbJOggpsHAHC:lmgnylCMm5vQRC","tlshash":"1d34241f56c00337073b0696797db0c7b1788ca763c4a476aec7a13a136b919f1a66bc","first_seen":"2026-01-07T04:15:05.803511Z","last_seen":"2026-06-16T01:49:36.515228Z","times_seen":216,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/marketing_english-json.js?contenthash=9973d03d5687799df4f2","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:42.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/javascript/applications/store/marketing_english-json.js?contenthash=9973d03d5687799df4f2 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\nlast-modified: Thu, 26 Mar 2026 22:14:12 GMT\r\netag: \"bWVYp4jgDH4h\"\r\ncache-control: public,max-age=259200,must-revalidate\r\nexpires: Sun, 29 Mar 2026 22:16:53 GMT\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:42 GMT\r\nvia: 1.1 varnish\r\nage: 176341\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 24719\r\nx-timer: S1776143022.304149,VS0,VE0\r\ncontent-length: 27644\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":27644,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27480)","md5":"bc7dc7dc8d69ece48a1fa2e27ab0233a","sha1":"6fa797d8ceafc10394f141f0f2527a9f60840edf","sha256":"e87591bf137b6e6d08c85a9b9292ee1c233e14875e63778d44a9eb8fb3ef8d88","sha512":"00f22454435c1bb10fa30ee8fcfb56fac934068297cb9714bed56db31d52ee2bc21c405bbcf46b7c49944a9acb32fc1bdd8a72e85c2573bbe3baeb245ea27820","ssdeep":"768:MUHLm+blpNN7VMxsgE3kSd5/VQ472IZTUgZiQZ:MUrmaN7VR37d5/VQTIZTTZ","tlshash":"cbc2d4b9f1376a2603cedef82dbefb4511bb80680708795d54685d2eb0f63d449328e8","first_seen":"2026-03-27T05:21:26.733205Z","last_seen":"2026-05-05T02:06:29.759046Z","times_seen":79,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=r6syZUh8_Rpk\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/shared/css/shared_responsive.css?v=r6syZUh8_Rpk\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"bVAhy8BAW0iP\"\r\nx-integrity: \"sha384-zW5DK3fEhX+CDUyPlAVXYjVI/RpCZoWmoZ2di28LfvExjXV2cTbMBeL2c0EmLupY\"\r\nlast-modified: Sun, 03 May 1970 14:00:39 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 14 Apr 2026 05:03:41 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1776143021.632314,VS0,VE604\r\ncontent-length: 7126\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21372,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1673)","md5":"6d5021cbc0405b488f6362d7323d4b2a","sha1":"cbbacc43b033ece04c47704290f3132e010ebf45","sha256":"00389ccb8ff656309879603f50fed5f10f4d3eb60194bdb8a6277bf2a880f16b","sha512":"8ac15b45c7df7fcdea671d7b180c995c8c0560ee6d576f9a9be9866a2bde8e54aabfe42a311dad336602ad2ca0620031bf7442d55e431d37eca22b14fff956cb","ssdeep":"384:hl5qYb2mQXrN1gCYezhmVJzeQj/H6TKlojyl26lK:j5qFmQX5uCczeQjv6q2t","tlshash":"1ba285176e20a102b30e7259fe569f25272fc1597f0d8e5ab7b9316862c539d00a3bcf","first_seen":"2025-12-17T07:01:12.802156Z","last_seen":"2026-04-15T13:19:31.971869Z","times_seen":169,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/css/v6/store.css?v=p1S4tSu2k8Oq\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/css/v6/store.css?v=p1S4tSu2k8Oq\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"13CjnPuGjLMj\"\r\nx-integrity: \"sha384-CxCrRtWm0pdJUuIC8o+sPowMzpK/na6DgXMKvAJdrFJRItsH+zsAaxGiamm+PYPY\"\r\nlast-modified: Sun, 03 May 1970 14:00:39 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 14 Apr 2026 05:03:41 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1776143021.653911,VS0,VE848\r\ncontent-length: 31064\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":132674,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (391)","md5":"d770a39cfb868cb323354cef6b9fe992","sha1":"d53afb0d631e4efb0b92bf0b075ddfc9b13e93f5","sha256":"b739de7b9ceb3b4d97416017eb8345f9329f2e452a9fc650f66ce8aed7888279","sha512":"9857478ca88b9991799a59bfc5a4eef94157abcc87c566b04b2491bff12cbc58dd33fb093a8d5c58578e104bb6472d21f9a1f5af9a741c8600778a2a266b8078","ssdeep":"3072:XGA2u5+OzBzROQAD+Tlu2vVWF18twtxtizq7yEbilRCZC6SeSH3ki/0Gzbhkj81/:XGA2uAOzBzROQAD+xu2vVWH8twt3izqI","tlshash":"efd3b7226b516445ba1ba1d8ff98eb45572f4083eb0e4e9ab4f5746cd3c81c81273f8e","first_seen":"2026-03-12T11:25:03.49609Z","last_seen":"2026-04-21T19:37:57.049622Z","times_seen":110,"resource_available":false,"data":null}},"time_used":949,"timings":{"blocked":-1,"dns":18,"connect":29,"send":0,"wait":861,"receive":2,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/css/v6/account.css?v=I-p68OdyrcJu\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/css/v6/account.css?v=I-p68OdyrcJu\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"5IZMxAp7hK5z\"\r\nx-integrity: \"sha384-l9BA9TqGY/FPG0NKi8ok9QdyStnhxk7+PUZd3h6MThM+fe35USqgvYcBMYc1q9IC\"\r\nlast-modified: Sun, 03 May 1970 14:00:39 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1776143021.662971,VS0,VE155\r\ncontent-length: 6682\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":27461,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"e4864cc40a7b84ae7378a64f91128c8d","sha1":"23444cb09e52e29021fc4aa143157e5db817b3cb","sha256":"54d55b021172a12e6b1a4660189b6275626c31dc3e3a9e51cba3a67ce0ef8267","sha512":"c4cdae246446c847423ff4be6b053ff8c8e91f573c5e29ee423da1dea7a555ade45af3fb2402a3df57ca75554044c5afe70a8cf9d93b19d61bf8a6fe5f74aa7b","ssdeep":"768:Y7g7u7T7RLxWBRffz27MWf9MyTZMeTlyBn+wjKbCjHpygw7A:Y7g7u7T7RLxWBRK7MWlMyT/ToZ9jYgwM","tlshash":"e5c251129b502d4ab60fa5adffd1d7b9571f00829e0e8f7eb5a4356d83482d40873ace","first_seen":"2026-04-08T08:46:40.854506Z","last_seen":"2026-07-07T08:30:48.335525Z","times_seen":32,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":13,"connect":28,"send":0,"wait":168,"receive":1,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/auth_refresh.js?v=w6QbwI-5-j2S\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/shared/javascript/auth_refresh.js?v=w6QbwI-5-j2S\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Tue, 14 Jul 2026 21:19:36 GMT\r\netag: \"w6QbwI-5-j2S\"\r\nx-integrity: \"sha384-+yOq2N+bhO4ulh9z3oEznLvTUVM7Tf0YBJxKQmF+kQ05ZkraLoLO6oYmY8ebPw1B\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nage: 1042755\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 10684\r\nx-timer: S1776143021.633074,VS0,VE0\r\ncontent-length: 677\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1527,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"c3a41bc08fb9fa3d925bfbde6930f313","sha1":"06bf235bae87234c3091962f40415b43492652e2","sha256":"8d764adbee3ffe7e61342a5b3be4c853c26c0a2c1e3eed1e63bb68cfee7944b0","sha512":"0ed874c12447dd3d84c745235d05c2b83ef47125f928aa87cf507a9189be1ff13a7f249ec207b09c5c64498991be4269039c18ff81bc26be92b78a5f4b6b1b55","ssdeep":"","tlshash":"6b31b9e09e8c0435137f009bbf2fbacd306e54725ed894a5bf05893a6c5830f97a5985","first_seen":"2024-11-16T08:41:12.910961Z","last_seen":"2026-08-09T02:12:59.929927Z","times_seen":2263,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/ico/ico_twitter.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:41.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/images/ico/ico_twitter.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 06 Dec 2023 00:00:29 GMT\r\netag: \"656fb99d-596\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 51943\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1776143021.710695,VS0,VE1\r\ncontent-length: 1430\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1430,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"afc159fe5f0f26fa7282505da9887cc3","sha1":"c1cd55380c2af435876989f94e8b0715042c2ade","sha256":"4be942a34871dd6f8f14b43d27c31b049be7f6544c05685d4f35abdd329de176","sha512":"8f7dcb7e99ceed8f86575a05ff7d329ee2fc67cd18c6d53b2833a6aa1eede2586d57688f27901d941d2b6351412957468cce5ca69101d86911390bf04fd82763","ssdeep":"","tlshash":"24217419f8b59b11838ade4029d7d03b9d279880cadcd9b629ced4875c742fe987c8c7","first_seen":"2023-12-07T16:24:36Z","last_seen":"2026-08-05T12:54:36.521196Z","times_seen":2433,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/gTpTIWhbKpxADzTzkcabhXN4/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:43.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /recaptcha/releases/gTpTIWhbKpxADzTzkcabhXN4/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gift-everyone.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370282\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Apr 2026 03:56:33 GMT\r\nexpires: Wed, 14 Apr 2027 03:56:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 07 Apr 2026 00:03:12 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 4030\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":868023,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (738)","md5":"e99a11c277c9d1b0b51c4a67cc3d7b69","sha1":"a2a8e66d64b163cf0080e902774207c325c1f4e1","sha256":"6432e3b9dc0f3e73b04605259cc0f5200e7a3dcf7488e27921a3b3c3c5a5a672","sha512":"966cb8cfbd38ec2e950af506194cdde48ae4e7c02ee6742a6a282be20f333f58f7fddf2c87d26d3f5dedac11399159ea03ef44a34dd96ed908b672ec88ea9696","ssdeep":"12288:CMHc63LVkzXYW+VS4HojkEda8yw2UzqbklH1JBcl:7HB3LVkzIW+VZoj3d7yw2507el","tlshash":"62054de939137a759362b5f214b32049a37e581ac448099e72d9c4f12ffb809b0f6e77","first_seen":"2026-04-13T15:36:41.874381Z","last_seen":"2026-07-18T21:01:58.403079Z","times_seen":31649,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":101,"dns":1,"connect":21,"send":0,"wait":22,"receive":90,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.akamai.steamstatic.com/steam/clusters/about_i18n_assets/about_i18n_assets_0/wallet_card_img_english.png?t=1636143670","fqdn":"cdn.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.77.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:41.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 21:24:34 GMT","end":"Thu, 04 Jun 2026 21:24:33 GMT"},"fingerprint":{"sha1":"DE:F9:52:53:57:70:A4:34:C1:BB:ED:5F:81:3C:21:B2:F5:8A:83:69","sha256":"36:FE:01:E6:8A:D8:0C:BB:37:A9:8B:A4:20:B0:75:54:EC:7F:A1:7F:59:24:2E:EC:B4:8E:A9:89:AE:61:13:AE"}}},"request":{"raw":"GET /steam/clusters/about_i18n_assets/about_i18n_assets_0/wallet_card_img_english.png?t=1636143670 HTTP/1.1\r\nHost: cdn.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 503402\r\nLast-Modified: Wed, 24 Sep 2014 18:08:02 GMT\r\nETag: \"54230882-7ae6a\"\r\nAccept-Ranges: bytes\r\nDate: Tue, 14 Apr 2026 05:03:41 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":503402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 406 x 719, 8-bit/color RGBA, non-interlaced","md5":"eaa918479400786006bc5a37e77075a2","sha1":"cb892a61d8643b235ac589d9e0fd7a4a97ce56a9","sha256":"69a47ea33e7fa0226b9f23b5837a9075f36a0ffc2e7adc2f5b30f564e1dad09c","sha512":"52bcd20485323c7451fcfbacf51a3e5366031198177ce53815ee031a451219755421da894edeb8e26a83ec84d7e52217b26158ddf5b0449bffe8f286b2238942","ssdeep":"12288:vyy70uBu8olN1OkoyLscRq3XNDLNLJ10A:vydHOkhhqXdN7","tlshash":"21b423629ee66b409c0f36b357b263eb701a684a1f7fe0494975c0d948fa708dc3e45d","first_seen":"2023-05-02T15:44:11Z","last_seen":"2026-08-03T18:49:16.653644Z","times_seen":1881,"resource_available":false,"data":null}},"time_used":1404,"timings":{"blocked":506,"dns":43,"connect":1,"send":0,"wait":4,"receive":38,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:41.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://store.fastly.steamstatic.com/public/shared/css/shared_global.css?v=LkH7FFmHUNxE\u0026l=english\u0026_cdn=fastly\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:11 GMT\r\netag: \"649bb1ef-123\"\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:41 GMT\r\nvia: 1.1 varnish\r\nage: 13383\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 119\r\nx-timer: S1776143022.691146,VS0,VE0\r\ncontent-length: 291\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":291,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced","md5":"a2796187c58c7e948159e37d6990ecc2","sha1":"4209cd85add507247f9ce5a87a8c9095b54ee417","sha256":"23341256db7f44b1f3811880fa2bae6b7748bbf6b62c544a162e38cf0d5c5082","sha512":"5ef103b8398507495c2708df8fcd82bdb763b1d580aaaa6cacfb805614764277c19e8ece5d890a8aafc004fc8c25e3ab2e67d6fbf373c432a9a0d7c36fa0890f","ssdeep":"","tlshash":"83d0ebf3a3e86d79fb52fe97d10180e0465fcaeb6004877889c3880447a81f880f2996","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-08-09T02:12:59.881697Z","times_seen":7499,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"k5leO7MVvAaV\"\r\nx-integrity: \"sha384-rc1rbWHthsreW3AQ0ZcjHfFF0HDbAtcPxoiduABkNRCzrUT+UHgX7OCf2yda9SqG\"\r\nlast-modified: Sun, 03 May 1970 14:00:39 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1776143021.632633,VS0,VE152\r\ncontent-length: 4923\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":17568,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"93995e3bb315bc0695254d745e88d5e1","sha1":"206782432cbbafa347e32cd5c19775a701faef83","sha256":"39cbe8d0785370b4ebda08f844727ac3a6fc5cab10bd26cbeda5dc36ff4166d0","sha512":"b6e8c9675e186e53a54a40e45ee78f6025b0ddc3f067f6f0bef67fef3ce5f30cce2d0be18b7457e05ff397ef8c301ab5bb07fe53fcf61e11f65de9f872f361d0","ssdeep":"192:h3ug34ZknOPADCO0izmla3uCXDJiC7ZEb9k9Hdqyo0WPn4PRP/4PaP34Pjc+8ubK:h3ug4R4svlBEJpocOFJ2eu+i9","tlshash":"ec826591f73d20ae407ab3be896d2388b33e40b65161f8757d7886743a4e4970392fe4","first_seen":"2026-02-18T02:21:57.511284Z","last_seen":"2026-07-06T14:55:45.214808Z","times_seen":595,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gift-everyone.cfd/a578f6fcea17657d6481f19e42037c78282141786b3b/b0fda31a9fa31e8ef186f59edb35f051bdbf6742ba1a.css","fqdn":"gift-everyone.cfd","domain":"gift-everyone.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gift-everyone.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 02:24:17 GMT","end":"Fri, 10 Jul 2026 02:24:16 GMT"},"fingerprint":{"sha1":"CD:F9:2A:89:00:B4:27:81:5A:84:EA:08:73:CB:4D:75:1D:BF:1A:2A","sha256":"D2:B5:02:E8:BF:09:52:6E:99:A9:DA:20:7A:9C:48:C6:82:B2:B7:AB:4B:8E:98:B3:3F:B1:35:89:3E:F2:20:3F"}}},"request":{"raw":"GET /a578f6fcea17657d6481f19e42037c78282141786b3b/b0fda31a9fa31e8ef186f59edb35f051bdbf6742ba1a.css HTTP/1.1\r\nHost: gift-everyone.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.LXrU1lm4MniN_MHCfEm0GrEq6qyOGRNK.Pt6IT-NvNJZwtxoG.MLXRguliAN-UiIb6yi2oA8q1pdXdFtI8Z1JSwugzAVzom-28p3G2ojQnLDnvDKTPHBiQaYrK6-MuhHbSiZlZH9jv7esCE0x1zO22u0ckbbvKOiOVDNYCc1k01QU9Dl7KCvOgAjsta6dszOTxWOeVHAFaGJeZJKKvTSQnhbO448-FmWxXgboCMULWp6shT1_MWlzL_EHUzJX1Mjra2NH690UWbtEulkORYvfjAdlyz0bwaeMPiUXQ53GMpmg8BjSe0aUprmUZrmJ40nGF1w7XZEs0k0CkKX8._v_tQtH_oqVgd6cYnWQURQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODgsInNlY3JldCI6IjFjYTQ4NTNkM2NmYjk4Nzc5NTUyYTUzZmE4NmNlNjRhIiwic2VydmljZSI6IlN0ZWFtIn0.MXWjkMN77nPUhK5p3SHoVOcBdRiwjQpO1DoBDFm26Wg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: openresty\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"41-0AeMVzV1pApYTMktTMxeiuYqqUg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.steampowered.com/IClientMetricsService/ReportClientError/v1","fqdn":"api.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:52.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steampowered.com","organization":"Valve Corp"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:66:D7:D2:99:D6:A1:56:A5:A6:D9:94:5C:88:56:DD:5C:41:8E:49","sha256":"C5:81:A7:0E:F1:39:43:B6:7A:5C:E3:67:B5:C9:6C:8C:D4:AD:B1:96:E3:F0:6B:88:9F:83:D4:2D:94:97:36:7C"}}},"request":{"raw":"POST /IClientMetricsService/ReportClientError/v1 HTTP/1.1\r\nHost: api.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: multipart/form-data; boundary=---------------------------395048932533294513833430187207\r\nContent-Length: 2051\r\nOrigin: https://gift-everyone.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2051,"data":"-----------------------------395048932533294513833430187207\r\nContent-Disposition: form-data; name=\"input_protobuf_encoded\"\r\n\r\nCgVTdG9yZRIIMTA1ODI1NjIa3goKRkAvNzUxYTJmNTU3NTA0NTAwZDU3NDY1NTI2MGMwMTAzMDAwYjA3MDQwNDU1MGQ6MjgyOjQ1IDkzNDY1Y2Y0ZDBhYTUzYzcSkQpbIiQoLi4uKS52X3Rvb2x0aXAgaXMgbm90IGEgZnVuY3Rpb24iLFsiQCIsImh0dHBzOi8vZ2lmdC1ldmVyeW9uZS5jZmQvNzUxYTJmNTU3NTA0NTAwZDU3NDY1NTI2MGMwMTAzMDAwYjA3MDQwNDU1MGQiLDI4Miw0NV0sWyJlQCIsImh0dHBzOi8vY2RuanMuY2xvdWRmbGFyZS5jb20vYWpheC9saWJzL2pxdWVyeS8zLjQuMS9qcXVlcnkubWluLmpzIiwyLDI5NDUzXSxbIkRlZmVycmVkL3RoZW4vbC88L3Q8QCIsImh0dHBzOi8vY2RuanMuY2xvdWRmbGFyZS5jb20vYWpheC9saWJzL2pxdWVyeS8zLjQuMS9qcXVlcnkubWluLmpzIiwyLDI5NzU1XSxbInNldFRpbWVvdXQgaGFuZGxlcipEZWZlcnJlZC90aGVuL2wvPEAiLCJodHRwczovL2NkbmpzLmNsb3VkZmxhcmUuY29tL2FqYXgvbGlicy9qcXVlcnkvMy40LjEvanF1ZXJ5Lm1pbi5qcyIsMiwyOTk2NF0sWyJjQCIsImh0dHBzOi8vY2RuanMuY2xvdWRmbGFyZS5jb20vYWpheC9saWJzL2pxdWVyeS8zLjQuMS9qcXVlcnkubWluLmpzIiwyLDI3NzQyXSxbImZpcmVXaXRoQCIsImh0dHBzOi8vY2RuanMuY2xvdWRmbGFyZS5jb20vYWpheC9saWJzL2pxdWVyeS8zLjQuMS9qcXVlcnkubWluLmpzIiwyLDI4NDg3XSxbImZpcmVAIiwiaHR0cHM6Ly9jZG5qcy5jbG91ZGZsYXJlLmNvbS9hamF4L2xpYnMvanF1ZXJ5LzMuNC4xL2pxdWVyeS5taW4uanMiLDIsMjg1MjNdLFsiY0AiLCJodHRwczovL2NkbmpzLmNsb3VkZmxhcmUuY29tL2FqYXgvbGlicy9qcXVlcnkvMy40LjEvanF1ZXJ5Lm1pbi5qcyIsMiwyNzc0Ml0sWyJmaXJlV2l0aEAiLCJodHRwczovL2NkbmpzLmNsb3VkZmxhcmUuY29tL2FqYXgvbGlicy9qcXVlcnkvMy40LjEvanF1ZXJ5Lm1pbi5qcyIsMiwyODQ4N10sWyJyZWFkeUAiLCJodHRwczovL2NkbmpzLmNsb3VkZmxhcmUuY29tL2FqYXgvbGlicy9qcXVlcnkvMy40LjEvanF1ZXJ5Lm1pbi5qcyIsMiwzMTQ2MF0sWyJCQCIsImh0dHBzOi8vY2RuanMuY2xvdWRmbGFyZS5jb20vYWpheC9saWJzL2pxdWVyeS8zLjQuMS9qcXVlcnkubWluLmpzIiwyLDMxMjM5XSxbIkV2ZW50TGlzdGVuZXIuaGFuZGxlRXZlbnQqQCIsImh0dHBzOi8vY2RuanMuY2xvdWRmbGFyZS5jb20vYWpheC9saWJzL2pxdWVyeS8zLjQuMS9qcXVlcnkubWluLmpzIiwyLDMxNjA4XSxbIkAiLCJodHRwczovL2NkbmpzLmNsb3VkZmxhcmUuY29tL2FqYXgvbGlicy9qcXVlcnkvMy40LjEvanF1ZXJ5Lm1pbi5qcyIsMiwyMjBdLFsiQCIsImh0dHBzOi8vY2RuanMuY2xvdWRmbGFyZS5jb20vYWpheC9saWJzL2pxdWVyeS8zLjQuMS9qcXVlcnkubWluLmpzIiwyLDIyNV1dGAE=\r\n-----------------------------395048932533294513833430187207--\r\n"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-length: 0\r\nexpires: Tue, 14 Apr 2026 05:03:52 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Tue, 14 Apr 2026 05:03:52 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":81,"dns":55,"connect":1,"send":0,"wait":186,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/dselect.js?v=sfK6UJLNp872\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/shared/javascript/dselect.js?v=sfK6UJLNp872\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"w0CV_PAvw3UA\"\r\nx-integrity: \"sha384-mxEgD51SeWp6+tzhNCvfGVi1cafel5e1WpjGnuuBKXmX6j1keG2iCHSIQMN2oBJr\"\r\nlast-modified: Sun, 03 May 1970 14:00:39 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1776143021.652113,VS0,VE151\r\ncontent-length: 3016\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":10005,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"c34095fcf02fc37500535c01c105959e","sha1":"54ce027b82d18356f535df4fd3cc879c01cb62a3","sha256":"6b9f2a2c6be7ec51b932534e3500b4bfd0f4017bd48231e8e8a7c948d151c976","sha512":"976775275db96f70544bedf2052099cc080d7abeef9296b2f1fb441f9f25f2ab8ad0f8292ba94279b9305593ff3a00cbd27fd96d92a485a21014986c4580321f","ssdeep":"192:MRfE8jdnRqi49tazp+SJ2GvZg2gECs148kgsaWEE+WTH1VbEIhksB:MhOdLSwCbkg8f1VT+Q","tlshash":"79229650b32c17e910be04bfcdc59de8656ca9f68c0358a2bd9881ac75d45ab13fdc1b","first_seen":"2025-12-17T07:06:50.845749Z","last_seen":"2026-08-04T03:11:41.765032Z","times_seen":167,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/main.js?v=wiAgKBaqWusf\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/javascript/main.js?v=wiAgKBaqWusf\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"2jl8YRZgA0FC\"\r\nx-integrity: \"sha384-ezl+dWJ0MFZ4B6Dou+CLOSWKjr3fdpgms+dtUo9NRQ+6CZJCZFPhtY3+0jFG/Tb8\"\r\nlast-modified: Sun, 03 May 1970 14:00:39 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 14 Apr 2026 05:03:41 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1776143021.633049,VS0,VE768\r\ncontent-length: 23191\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88998,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (367)","md5":"da397c611660034142c006cfec5919c7","sha1":"f324aa1becc65d1586c1831c18e4e45ce2362021","sha256":"d2dbe964068179178825d83a225345ef69f26a7493027a40cb1b4ca44ed88b88","sha512":"d2578310dc318d6002dec2abbeb80a97e1388ca1474dd87e38a00a9f1b24c463126e88d9ab14449388a647fce5fc62c6955f3f8b0e544cb178cf42fba7e04c75","ssdeep":"1536:UqB6CKVhEGSF77Rdr+DUfMpauSa4ZRxwKOLWxLm46mMPe8RbKmV7ydSxk+XBwWP1:bBuLY1Szb","tlshash":"5d9309d4f7ad01399479203cad1f90897a3e5871b900a8627d4e8a9874d092f43bff7e","first_seen":"2026-04-08T20:24:12.979098Z","last_seen":"2026-04-28T08:08:12.082838Z","times_seen":30,"resource_available":true,"data":null}},"time_used":784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.11.3/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /ui/1.11.3/jquery-ui.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-72b1e\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nage: 1202879\r\nx-served-by: cache-lga21958-LGA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1560, 113\r\nx-timer: S1776143021.752554,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 113814\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":469790,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (547)","md5":"c811575fd210af968e09caa681917b9b","sha1":"0bf0ff43044448711b33453388c3a24d99e6cc9c","sha256":"d2f0522008bff05c6434e48ac8f11f7464331436a4d5d96a14a058a81a75c82e","sha512":"d2234d9e8dcc96bca55fafb83bb327f87c29ae8433fc296c48be3ef8c9a21a0a4305e14823e75416951eecd6221f56fbbb8c89d44b244a27be7b6bea310f2fd1","ssdeep":"6144:zK8SyEGdEXdujYWUl/plq/pGlgFld1HmcI48VirY7IXtu2Y5W5ZbHtQTiTXu5bgs:fljHmcI4q5W5FHttCnuJq7CjhBK1","tlshash":"b0a4a689f39c266a857a325d5c2e41ce723c8076d60158bfbc5c59dc29e883c42bbf79","first_seen":"2023-03-07T01:03:14Z","last_seen":"2026-08-08T21:36:14.51594Z","times_seen":3369,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":1,"connect":26,"send":0,"wait":27,"receive":57,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gift-everyone.cfd/751a2f55750450035617350b4d5d745857535c55","fqdn":"gift-everyone.cfd","domain":"gift-everyone.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:41.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gift-everyone.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 02:24:17 GMT","end":"Fri, 10 Jul 2026 02:24:16 GMT"},"fingerprint":{"sha1":"CD:F9:2A:89:00:B4:27:81:5A:84:EA:08:73:CB:4D:75:1D:BF:1A:2A","sha256":"D2:B5:02:E8:BF:09:52:6E:99:A9:DA:20:7A:9C:48:C6:82:B2:B7:AB:4B:8E:98:B3:3F:B1:35:89:3E:F2:20:3F"}}},"request":{"raw":"GET /751a2f55750450035617350b4d5d745857535c55 HTTP/1.1\r\nHost: gift-everyone.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.LXrU1lm4MniN_MHCfEm0GrEq6qyOGRNK.Pt6IT-NvNJZwtxoG.MLXRguliAN-UiIb6yi2oA8q1pdXdFtI8Z1JSwugzAVzom-28p3G2ojQnLDnvDKTPHBiQaYrK6-MuhHbSiZlZH9jv7esCE0x1zO22u0ckbbvKOiOVDNYCc1k01QU9Dl7KCvOgAjsta6dszOTxWOeVHAFaGJeZJKKvTSQnhbO448-FmWxXgboCMULWp6shT1_MWlzL_EHUzJX1Mjra2NH690UWbtEulkORYvfjAdlyz0bwaeMPiUXQ53GMpmg8BjSe0aUprmUZrmJ40nGF1w7XZEs0k0CkKX8._v_tQtH_oqVgd6cYnWQURQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODgsInNlY3JldCI6IjFjYTQ4NTNkM2NmYjk4Nzc5NTUyYTUzZmE4NmNlNjRhIiwic2VydmljZSI6IlN0ZWFtIn0.MXWjkMN77nPUhK5p3SHoVOcBdRiwjQpO1DoBDFm26Wg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 14 Apr 2026 05:03:41 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 287\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"11f-o6Vcx8VGjDfz6OzQYGhMGwwTuzk\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":287,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ec6dff03c25bc8d7584f8e98987ff858","sha1":"a3a55cc7c5468c37f3e8ecd060684c1b0c13bb39","sha256":"913370d033298521c255a15389c23f6940185c89853067837e97ab2cea260f14","sha512":"3de2bb66ff1356fc91c2853165318dc6625a5e54b0436140e80e6b53014397b8f89742ed7c6bac2d65294ae2ec1ec15db075e9cb7ff549865505519431f09439","ssdeep":"","tlshash":"3fd02b1244ac907adb005240805b7f0ad5bc2a2344c8b82e76bdcb329dfc2db2409eaf","first_seen":"2026-04-14T05:04:15.31682Z","last_seen":"2026-04-14T05:04:15.31682Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/shared_english-json.js?contenthash=377512acf3b9a558ed42","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:42.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/javascript/applications/store/shared_english-json.js?contenthash=377512acf3b9a558ed42 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\nlast-modified: Tue, 07 Apr 2026 22:20:18 GMT\r\netag: \"lyUGM0CG43RA\"\r\ncache-control: public,max-age=259200,must-revalidate\r\nexpires: Fri, 10 Apr 2026 22:21:04 GMT\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:42 GMT\r\nvia: 1.1 varnish\r\nage: 24156\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 2087\r\nx-timer: S1776143022.292081,VS0,VE0\r\ncontent-length: 261806\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":261806,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65248)","md5":"51c676595b5cdc19739d5e2819980ca3","sha1":"94d0410174f2378dc85e04b642057ed1f840ee3f","sha256":"c47878c839fd5b2f0c4efc8aef82908d3fe95bb65395ba706b9b7e3d13108159","sha512":"684b75e948cefe97a311c22ead95bd2886e2452928446dcc2bb75f13d7406443f282d157a9251613989d479cad6b98651f4d8ef5245e22969ca5b148f0575b90","ssdeep":"3072:9C0JiCCpaeCYQErjIr3fNZPdzr6oQxETtvorj0UAI0N4/h:M0NwaeJQwIjfNZPp6oQxQM","tlshash":"5944390f9a4d6d76078703e7ba0b6ca35bb040df63461c219eda4d4f11da78ea33b958","first_seen":"2026-04-08T08:46:40.894154Z","last_seen":"2026-04-20T18:54:16.064311Z","times_seen":33,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=YzJgj1FjzW34\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/shared/css/motiva_sans.css?v=YzJgj1FjzW34\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Tue, 14 Jul 2026 21:19:26 GMT\r\netag: \"YzJgj1FjzW34\"\r\nx-integrity: \"sha384-8Mx0sTcnCZvBno56DpQQEfbTlesmKxxJozFgeV4x3Z5jsf3hwLgm/ZZL7AmLPQZL\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nage: 531797\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 11300\r\nx-timer: S1776143021.632229,VS0,VE0\r\ncontent-length: 625\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2568,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"6332608f5163cd6df8796cfa8a99fe80","sha1":"cc0739fefcf56fc1c4f60c531e470134251747eb","sha256":"d4c043cef21ba8cb6b3bdf0e4f48522987b298607a576046195696430e403e4a","sha512":"3d394f47d64585ebef5eac576788e55b9f274b991394ceffa26776ef790435a94809c2a54ab21e1a3fdef001d21e9c922909ea673547824cef6a44ef0bc6d66d","ssdeep":"","tlshash":"6851de84655cd13f5fe80c83f3cb6d269e0f342a30aac975c5a31a94afa143a0375b5a","first_seen":"2024-11-16T08:41:12.896558Z","last_seen":"2026-08-08T16:24:09.00955Z","times_seen":818,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":25,"connect":13,"send":0,"wait":13,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:12 GMT\r\netag: \"649bb1f0-736\"\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 14455\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1776143021.669036,VS0,VE1\r\ncontent-length: 1846\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1846,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced","md5":"574c350c7b23ae794d5276f8580e0838","sha1":"235c7b35c3468f8915eca01f7abdb43d34079609","sha256":"8b97ba0dac22fe6704c1f6d95fe79613f33017804f256abb9006df0442491787","sha512":"f1f2d7b6fa49e9241f2b88560127eb2871f66123c2f9de45b257750cf13e6ebb32a9d85d87aada6a99838a2f3c5412540065cbab398760a50f15aae3a759f9f7","ssdeep":"","tlshash":"7631d905eba0794086999ae271fb943bd9564095c7e07585b0cfdd294e704ac086d8cb","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-08-05T15:58:46.258409Z","times_seen":6500,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gift-everyone.cfd/908b7c69f4470f63ef9589286ab7d0f9bb279b6a6736/09b5f68739c78fb538adc4ae6719f62c2cfa1cf624d1.js","fqdn":"gift-everyone.cfd","domain":"gift-everyone.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:41.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gift-everyone.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 02:24:17 GMT","end":"Fri, 10 Jul 2026 02:24:16 GMT"},"fingerprint":{"sha1":"CD:F9:2A:89:00:B4:27:81:5A:84:EA:08:73:CB:4D:75:1D:BF:1A:2A","sha256":"D2:B5:02:E8:BF:09:52:6E:99:A9:DA:20:7A:9C:48:C6:82:B2:B7:AB:4B:8E:98:B3:3F:B1:35:89:3E:F2:20:3F"}}},"request":{"raw":"GET /908b7c69f4470f63ef9589286ab7d0f9bb279b6a6736/09b5f68739c78fb538adc4ae6719f62c2cfa1cf624d1.js HTTP/1.1\r\nHost: gift-everyone.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.LXrU1lm4MniN_MHCfEm0GrEq6qyOGRNK.Pt6IT-NvNJZwtxoG.MLXRguliAN-UiIb6yi2oA8q1pdXdFtI8Z1JSwugzAVzom-28p3G2ojQnLDnvDKTPHBiQaYrK6-MuhHbSiZlZH9jv7esCE0x1zO22u0ckbbvKOiOVDNYCc1k01QU9Dl7KCvOgAjsta6dszOTxWOeVHAFaGJeZJKKvTSQnhbO448-FmWxXgboCMULWp6shT1_MWlzL_EHUzJX1Mjra2NH690UWbtEulkORYvfjAdlyz0bwaeMPiUXQ53GMpmg8BjSe0aUprmUZrmJ40nGF1w7XZEs0k0CkKX8._v_tQtH_oqVgd6cYnWQURQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODgsInNlY3JldCI6IjFjYTQ4NTNkM2NmYjk4Nzc5NTUyYTUzZmE4NmNlNjRhIiwic2VydmljZSI6IlN0ZWFtIn0.MXWjkMN77nPUhK5p3SHoVOcBdRiwjQpO1DoBDFm26Wg; timezoneOffset=0,0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: openresty\r\ndate: Tue, 14 Apr 2026 05:03:41 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"41-0AeMVzV1pApYTMktTMxeiuYqqUg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gift-everyone.cfd/751a2f557504500d5d07031a.js","fqdn":"gift-everyone.cfd","domain":"gift-everyone.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gift-everyone.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 02:24:17 GMT","end":"Fri, 10 Jul 2026 02:24:16 GMT"},"fingerprint":{"sha1":"CD:F9:2A:89:00:B4:27:81:5A:84:EA:08:73:CB:4D:75:1D:BF:1A:2A","sha256":"D2:B5:02:E8:BF:09:52:6E:99:A9:DA:20:7A:9C:48:C6:82:B2:B7:AB:4B:8E:98:B3:3F:B1:35:89:3E:F2:20:3F"}}},"request":{"raw":"GET /751a2f557504500d5d07031a.js HTTP/1.1\r\nHost: gift-everyone.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.LXrU1lm4MniN_MHCfEm0GrEq6qyOGRNK.Pt6IT-NvNJZwtxoG.MLXRguliAN-UiIb6yi2oA8q1pdXdFtI8Z1JSwugzAVzom-28p3G2ojQnLDnvDKTPHBiQaYrK6-MuhHbSiZlZH9jv7esCE0x1zO22u0ckbbvKOiOVDNYCc1k01QU9Dl7KCvOgAjsta6dszOTxWOeVHAFaGJeZJKKvTSQnhbO448-FmWxXgboCMULWp6shT1_MWlzL_EHUzJX1Mjra2NH690UWbtEulkORYvfjAdlyz0bwaeMPiUXQ53GMpmg8BjSe0aUprmUZrmJ40nGF1w7XZEs0k0CkKX8._v_tQtH_oqVgd6cYnWQURQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODgsInNlY3JldCI6IjFjYTQ4NTNkM2NmYjk4Nzc5NTUyYTUzZmE4NmNlNjRhIiwic2VydmljZSI6IlN0ZWFtIn0.MXWjkMN77nPUhK5p3SHoVOcBdRiwjQpO1DoBDFm26Wg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncontent-disposition: inline\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nlast-modified: Fri, 27 Mar 2026 23:38:36 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":258804,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f7408b90ccddf50ebe44958bfc105f9e","sha1":"888dce7a3827e7ec0d1716404c7eda1b27f08ceb","sha256":"93fa2a34ef1ae939547f7d8f51b7e26e03b42ed4cd1011c239d8db404034e1b3","sha512":"0318a1bf2c9f619f7ae9b66809272ccaf48c40976b67c44c827b11acd92b6215a8793a03dfa4b00b3c8f15d42b9c2c707edc47930f7155076659b2ad64b2b9fc","ssdeep":"1536:ysjCfN7Bm+EvlKHMwAU6aURNpi4CcYVM6+8s5qv+c4zTSeBjSh2GJ8rNWRLC/zGq:KFmrO6R7Ic3S6vs1K0hNzbAoNpBdmLz","tlshash":"4144b80067c0ec5c23979b7a732fb5d5f56e0a9f2c84494be111fca066aa217faf9530","first_seen":"2026-04-06T12:57:07.122649Z","last_seen":"2026-04-18T08:10:47.270189Z","times_seen":19,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/account/redeem_wallet_complete_popup.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:41.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/images/account/redeem_wallet_complete_popup.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-57f1\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nage: 15793\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1\r\nx-timer: S1776143021.705807,VS0,VE1\r\ncontent-length: 22513\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":22513,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 439 x 170, 8-bit/color RGBA, non-interlaced","md5":"4dddfe80ce9184f5fcb77a8735791e69","sha1":"475c4b22242ad7dcabf0e7f43e09b066d75b13af","sha256":"87682460ef234c5cdd98375eea1f03cc165947b3aea57deec37d552b32ba29ec","sha512":"ae6c464bda07b5fbb341a8adbf4353adba197186becdca15ae4821592b0f35176b4869b38c43084bee17547374a1834929ff760d8173721228df7027da39a464","ssdeep":"384:mXE05G0jCZQZ1CDMpbltRByo7gVKjb2gWH4vvrSvrrBcyWh0VrS9Hzo05HOxLECN:c35G7ZGCDIzBH3b2gWNTvlX4uDpD","tlshash":"6aa2d130d92cf1fc88cab803cc49b9e7667959bdddea3514625516df281cd0e33b6426","first_seen":"2023-05-21T20:35:46Z","last_seen":"2026-07-31T15:18:13.659586Z","times_seen":420,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/footerLogo_valve_new.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:41.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/images/footerLogo_valve_new.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-a18\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nage: 5392\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 3\r\nx-timer: S1776143021.708328,VS0,VE0\r\ncontent-length: 2584\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2584,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced","md5":"86a9ccc0b872f22006a48bc6c2500f4e","sha1":"0edccf2cbc869816135c6ff4c3eee0c49d0f41c1","sha256":"d8bbe461137d50211568449468a1981ef189248200eadd48c3141a9df0b8f7fc","sha512":"43ebd681fe137718e45153b9ce062ce9426ac57d6ce907bd3b1c7709bf6f6d2ab4b49e22f2dc4f203dedf860a895a4b58f4a01095e97722ce5f27935038f0b56","ssdeep":"","tlshash":"64513a2ae811ec4252ccecc2a4fbe9123a12c90057c4dbb5fddbd84b3f602d1452d8da","first_seen":"2023-04-05T21:31:08Z","last_seen":"2026-08-05T12:54:36.517951Z","times_seen":2766,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:41.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gift-everyone.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://store.fastly.steamstatic.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/octet-stream\r\nlast-modified: Wed, 28 Jun 2023 04:07:10 GMT\r\netag: \"649bb1ee-1df3c\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:41 GMT\r\nvia: 1.1 varnish\r\nage: 6324\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 178\r\nx-timer: S1776143022.669377,VS0,VE0\r\ncontent-length: 122684\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":122684,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 22 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;MotivaSan","md5":"57613e143ff3dae10f282e84a066de28","sha1":"88756cc8c6db645b5f20aa17b14feefb4411c25f","sha256":"19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14","sha512":"94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176","ssdeep":"3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh","tlshash":"82c34b06f316e70aec614e3c66769399b358f8a53f2fcb0b95857d60bcad0d51e8128c","first_seen":"2023-04-05T04:16:14Z","last_seen":"2026-08-09T02:12:59.894065Z","times_seen":7289,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/css/shared_global.css?v=LkH7FFmHUNxE\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/shared/css/shared_global.css?v=LkH7FFmHUNxE\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"qbbUOQL2SbhT\"\r\nx-integrity: \"sha384-hqYJdWf1aPvkqS2bUpzoJeqkC2JJrpfqsP0A4IM9384/8lrnACmSlSyk81q33sIl\"\r\nlast-modified: Sun, 03 May 1970 14:00:39 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 14 Apr 2026 05:03:41 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1776143021.644237,VS0,VE754\r\ncontent-length: 21211\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86798,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1819)","md5":"a9b6d43902f649b85373e807fd68bb18","sha1":"eea623f1bccb4a5de27e1e02bba25d7509d600e9","sha256":"07b268de67d0ed5e820c5afe377909a3140b1097304f6b675e48497f7e3e6657","sha512":"72a636bb679f2f85c9b4ae3bb443915332bad3a4061bc25c1ad363985c7f2e698492c3b26d744df2d0d734ac850748ba228fac496dc4c78bb454e04264c043e1","ssdeep":"1536:+ORsHeX5Czk1Pl9CqB2jVbMGeuyGLTYlyXS/05h0/+xebmRUgiVgrkC8+0i7b7Ld:5plX4lzxQH9JSTcKB6LwHAfnYCC","tlshash":"fa83f733a691718b772f9495fa07ae2bb33f008b9b0d8f79f1a5396cd2841d41273649","first_seen":"2026-02-25T13:20:52.977083Z","last_seen":"2026-04-21T19:37:57.040538Z","times_seen":128,"resource_available":false,"data":null}},"time_used":839,"timings":{"blocked":-1,"dns":11,"connect":16,"send":0,"wait":777,"receive":2,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/css/buttons.css?v=ecbk11GZ8OUy\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/shared/css/buttons.css?v=ecbk11GZ8OUy\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"BZhNEtESfYSJ\"\r\nx-integrity: \"sha384-WR1NDuupLEK4yL9wDNN/G36HecidHf6UL4TJijRijlYDtO0KH2PQNjaGLh8BcmMk\"\r\nlast-modified: Sun, 03 May 1970 14:00:39 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1776143021.648192,VS0,VE151\r\ncontent-length: 4430\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36501,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"05984d12d1127d8489ba16224cf757b8","sha1":"5c5c95ffa7bd25710ad402567598333446483208","sha256":"6531f23b878cb46ef9d086cad8aa7a72814f207b65bf1f3bffb7f9be39056bce","sha512":"e65ecffc952eb1cd6f3cc8a6b7e5a339260427fe63b7ca8c6deaf11b0778f4632780930c2e31fee329d00da1e2b598de5f5cf7a4adc1f7d23306c1e93758ce50","ssdeep":"384:l5/z6bJaBhSdbiabUo7aZaKj6vvZfGW+I/n:rj6vvZfGW+I/n","tlshash":"e1f2ce99b38c70753237e1e065175fe86a7a109e88670f9efab5b2bc13da0ec1535813","first_seen":"2025-05-20T11:35:20.984378Z","last_seen":"2026-08-08T16:24:08.917677Z","times_seen":718,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":20,"connect":26,"send":0,"wait":164,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/css/v6/cart.css?v=SFGHVOgNiRXD\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/css/v6/cart.css?v=SFGHVOgNiRXD\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"y4QQjZrDSRRX\"\r\nx-integrity: \"sha384-4bW4xVrSsze4sAiptq056JfcJ6uuFs2GgW+1w4hpxfFY2s59jHkPjw83NxGxpNvb\"\r\nlast-modified: Sun, 03 May 1970 14:00:39 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1776143021.663930,VS0,VE302\r\ncontent-length: 14039\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55306,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (361)","md5":"cb84108d9ac3491457d82d05dbdb5ff3","sha1":"1b3a4f7211b00c141567401c396ad6c080d112ff","sha256":"ca5e0bcafd74dec793cd2e480a884f0ac7eac032c655adc63a692f9d92da80f3","sha512":"5fecea4d56fc6b8f9bdb4cecd4aa21fdcfc792509f8251b341e175e0564eda2f38eac105b4763a5d946363cfb0ae3c154510952fee238199717d4db92b12ab4f","ssdeep":"1536:NQjX1bKOkMXsVhk5JF79Aj7qBf2FHTuVJlKCeMu:NQjX1fX6k5JF79A3qBeFHTuVJlReMu","tlshash":"7b4384176a112815b21f9899ff46fbd7572b8183af0f5ea6f8d0783cc3841e11267a8d","first_seen":"2026-04-08T08:46:40.855553Z","last_seen":"2026-06-03T09:45:36.958686Z","times_seen":30,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":15,"connect":29,"send":0,"wait":315,"receive":1,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/shared_global.js?v=gOyfgA0bHRkL\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/shared/javascript/shared_global.js?v=gOyfgA0bHRkL\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"74PhtZvVZD8D\"\r\nx-integrity: \"sha384-OzzGyWG/8EA0T314vshpyoinjaNYxdAwMbBcIq1L6CVgZs+FchU9iR8enLAhxNDY\"\r\nlast-modified: Sun, 03 May 1970 14:00:39 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 14 Apr 2026 05:03:41 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1776143021.632908,VS0,VE903\r\ncontent-length: 43817\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":156896,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2464)","md5":"ef83e1b59bd5643f035f1b05bd973442","sha1":"137f311ba26169563a0b2ff16415a78207361e5f","sha256":"187934abf67c5e39b0ac2af4b62ebafe1f65ef3d134ea452bf5f1cebc75b211d","sha512":"f180f61e9a010dc2f5953c189760be8cab698702523246132cc8fd6fe29febaf05c65e58b237dcd9eb6f5e49dbd453d95d09350375304b9eb641f7035e37b708","ssdeep":"1536:hvZkXRW6Q2hNJRNhUmciMQzoscmDecTV8iqD3YHI1Sp6D3QgQHrMTAQaOlXkwRig:U/5UmciZos1DecSP7YHVgOSXKA1","tlshash":"e8e319d5eb7c212a897a302ddd4f50493a7e5832b00468297c5e94d86ae0d7e43bbf7c","first_seen":"2026-03-12T11:25:03.469166Z","last_seen":"2026-04-28T19:32:18.123004Z","times_seen":151,"resource_available":true,"data":null}},"time_used":920,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":917,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/redeemwalletcode.js?v=cU8ZLoLtUa1P\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/javascript/redeemwalletcode.js?v=cU8ZLoLtUa1P\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Sun, 19 Jul 2026 04:55:25 GMT\r\netag: \"cU8ZLoLtUa1P\"\r\nx-integrity: \"sha384-g/FHfL3JZ8071g2yqmm2oLSSd74gy3/fatNRIfqwMJ7L7/rwYApQLgETXI6Bwlu9\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\nage: 879670\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1776143021.644261,VS0,VE1\r\ncontent-length: 3504\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":13849,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text","md5":"714f192e82ed51ad4fe46f3f662873e9","sha1":"3fdc7571fc39939623aa8738d4f7893fe9cfbb68","sha256":"f262fff9b99c9e509ab6274988b09868da1d0e929c148227c7cba5ac0099b753","sha512":"ff68535bc298506b0c80ceba7cd091b33d471c7fa1cc10c0f52d2050edeada803779a6aefe6116f74852f8ff375b99c64eeba6633e794ff5045a73c82c21cb52","ssdeep":"384:OemLFWeQVifvuGwNhA5BXbZ2z1XSxgbmRxefs5rAXdoMaTMpwsSWWrBa3cGqpb:OJBXUz1skfNq99rkEb","tlshash":"d65284e6ff1e23056631022e19ce0899f6bd587595088db1fc6c877573a0c9c682eead","first_seen":"2024-12-10T13:14:44.764704Z","last_seen":"2026-07-31T15:18:13.677183Z","times_seen":165,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/modal.js?v=7G8uHr4fXaTj\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/javascript/modal.js?v=7G8uHr4fXaTj\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Thu, 02 Jul 2026 20:23:43 GMT\r\netag: \"7G8uHr4fXaTj\"\r\nx-integrity: \"sha384-nU+6qTzBsL1A6gC/vB0aigkn8+0M8RpWzQA7/5Kql0frM17AHth6nQYPG+x+gJp0\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\nage: 1629608\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1776143021.655539,VS0,VE1\r\ncontent-length: 1043\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2802,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text","md5":"ec6f2e1ebe1f5da4e35ce187b96f63b4","sha1":"9a3ba01d1a0b3a6972bea477b6c4ba647b1daa88","sha256":"30e30ee53b2d8690f2386fda09ab68f33236d28251752360188e536c866ed3a6","sha512":"a2f7f2c063f87aa2b4817136eecbf57cbdd8bd5f455c6bf741cbe95f8b7a7b8748eefa147231e50c4a8f3d5c01edd5d9929438beab6c5c6fd77f0edd569696ac","ssdeep":"","tlshash":"da51011adf6c063ae57d425fbc29eb99367d4432b10e1df0c86d2b5814e0e9b1687d28","first_seen":"2024-12-10T13:14:44.772055Z","last_seen":"2026-07-31T15:18:13.670443Z","times_seen":177,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:12 GMT\r\netag: \"649bb1f0-ec1\"\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nage: 15869\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 166\r\nx-timer: S1776143021.674520,VS0,VE0\r\ncontent-length: 3777\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3777,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced","md5":"eabc76eb57feae44add7faead028521e","sha1":"4e3e53938fad15661d2d046a868338841a95db19","sha256":"fc9e6260a2706ae146282d77e67bc1b74688435f8912ab4c1932641eec28bffa","sha512":"5c6da6eeefddf321c2bc7e39a134e0a3140a9f93ad1560b2e102ef60ec218c29aae14ed344c79e25cc5493cd15551040d8c909de28dcab02034d787563104e07","ssdeep":"","tlshash":"eb717ce7323e5456e1f056c6015b52f69eb1a1080d2b4e09f224b77831ac63be38333d","first_seen":"2023-04-05T21:31:08Z","last_seen":"2026-08-09T02:12:59.883402Z","times_seen":7565,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gift-everyone.cfd/id=5947221648","fqdn":"gift-everyone.cfd","domain":"gift-everyone.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-14T05:03:40.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gift-everyone.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 02:24:17 GMT","end":"Fri, 10 Jul 2026 02:24:16 GMT"},"fingerprint":{"sha1":"CD:F9:2A:89:00:B4:27:81:5A:84:EA:08:73:CB:4D:75:1D:BF:1A:2A","sha256":"D2:B5:02:E8:BF:09:52:6E:99:A9:DA:20:7A:9C:48:C6:82:B2:B7:AB:4B:8E:98:B3:3F:B1:35:89:3E:F2:20:3F"}}},"request":{"raw":"GET /id=5947221648 HTTP/1.1\r\nHost: gift-everyone.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=60, s-maxage=60, stale-while-revalidate=30\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"cda6-hrTqR92ghO9JdCcOOTcplGr+AR8\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nset-cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.LXrU1lm4MniN_MHCfEm0GrEq6qyOGRNK.Pt6IT-NvNJZwtxoG.MLXRguliAN-UiIb6yi2oA8q1pdXdFtI8Z1JSwugzAVzom-28p3G2ojQnLDnvDKTPHBiQaYrK6-MuhHbSiZlZH9jv7esCE0x1zO22u0ckbbvKOiOVDNYCc1k01QU9Dl7KCvOgAjsta6dszOTxWOeVHAFaGJeZJKKvTSQnhbO448-FmWxXgboCMULWp6shT1_MWlzL_EHUzJX1Mjra2NH690UWbtEulkORYvfjAdlyz0bwaeMPiUXQ53GMpmg8BjSe0aUprmUZrmJ40nGF1w7XZEs0k0CkKX8._v_tQtH_oqVgd6cYnWQURQ; Max-Age=21600; Path=/; Expires=Tue, 14 Apr 2026 11:03:40 GMT; SameSite=Lax\ntoken=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODgsInNlY3JldCI6IjFjYTQ4NTNkM2NmYjk4Nzc5NTUyYTUzZmE4NmNlNjRhIiwic2VydmljZSI6IlN0ZWFtIn0.MXWjkMN77nPUhK5p3SHoVOcBdRiwjQpO1DoBDFm26Wg; Max-Age=21600; Path=/; Expires=Tue, 14 Apr 2026 11:03:40 GMT; SameSite=Lax\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52646,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (51485)","md5":"334252f1e85546f1816613fed0d820aa","sha1":"86b4ea47dda084ef4974270e393729946afe011f","sha256":"09d056cd425a9eb5692ec16e9370e053b05d51202cee6c95719e6ba469f7bea2","sha512":"63f96ba81bb7ff33c0f3f7a8f5dde19cd6c054b48f566d07646586d6996a5e178de63fb8f65252cfd9951fe72fe7ca386535aa5e423dc488ec7ee4e2eba3f580","ssdeep":"768:AE2LNpFbVisO0v3M9vpCAmWuG69x/iLrCmCN8M1+8U68USBnGICjCDqb16yL6Qpx:AvjhN5324A4WOV3kE6GL2DqUa5fTO+B","tlshash":"e033b69a2bc336abcc8d521a135a5a7d9ad8dc030bd08474a6883f74317cd748ff598e","first_seen":"2026-04-10T01:17:03.317329Z","last_seen":"2026-04-14T05:04:29.169474Z","times_seen":5,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":95,"dns":35,"connect":25,"send":0,"wait":79,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamcommunity.com/favicon.ico","fqdn":"steamcommunity.com","domain":"steamcommunity.com","tld":"com"},"ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gift-everyone.cfd/id=5947221648","date":"2026-04-14T05:03:40.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steampowered.com","organization":"Valve Corp"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:66:D7:D2:99:D6:A1:56:A5:A6:D9:94:5C:88:56:DD:5C:41:8E:49","sha256":"C5:81:A7:0E:F1:39:43:B6:7A:5C:E3:67:B5:C9:6C:8C:D4:AD:B1:96:E3:F0:6B:88:9F:83:D4:2D:94:97:36:7C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: steamcommunity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/x-icon\r\nCache-Control: public,max-age=86400\r\nExpires: Sat, 11 Apr 2026 10:56:30 GMT\r\nLast-Modified: Fri, 22 Nov 2024 18:31:38 GMT\r\nDate: Tue, 14 Apr 2026 05:03:40 GMT\r\nContent-Length: 38554\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38554,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"231913fdebabcbe65f4b0052372bde56","sha1":"553909d080e4f210b64dc73292f3a111d5a0781f","sha256":"9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad","sha512":"7b11b709968c5a52b9b60189fb534f5df56912417243820e9d1c00c97f4bd6d0835f2cdf574d0c36ecb32dbbf5fc397324df54f7fdf9e1b062b5dbda2c02e919","ssdeep":"768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh","tlshash":"70038de82e4917aee9e2cf324adb6716237b4f88c0bc169742b07f193175a51c6d78c1","first_seen":"2023-04-05T07:02:49Z","last_seen":"2026-08-09T02:12:59.924688Z","times_seen":6884,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":55,"connect":1,"send":0,"wait":9,"receive":2,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gift-everyone.cfd/a578f6fcea17657d6481f19e42037c78282141786b3b/be82aabda5372818359c1bb10d2527df599f9f2332ce.css","fqdn":"gift-everyone.cfd","domain":"gift-everyone.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gift-everyone.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 02:24:17 GMT","end":"Fri, 10 Jul 2026 02:24:16 GMT"},"fingerprint":{"sha1":"CD:F9:2A:89:00:B4:27:81:5A:84:EA:08:73:CB:4D:75:1D:BF:1A:2A","sha256":"D2:B5:02:E8:BF:09:52:6E:99:A9:DA:20:7A:9C:48:C6:82:B2:B7:AB:4B:8E:98:B3:3F:B1:35:89:3E:F2:20:3F"}}},"request":{"raw":"GET /a578f6fcea17657d6481f19e42037c78282141786b3b/be82aabda5372818359c1bb10d2527df599f9f2332ce.css HTTP/1.1\r\nHost: gift-everyone.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.LXrU1lm4MniN_MHCfEm0GrEq6qyOGRNK.Pt6IT-NvNJZwtxoG.MLXRguliAN-UiIb6yi2oA8q1pdXdFtI8Z1JSwugzAVzom-28p3G2ojQnLDnvDKTPHBiQaYrK6-MuhHbSiZlZH9jv7esCE0x1zO22u0ckbbvKOiOVDNYCc1k01QU9Dl7KCvOgAjsta6dszOTxWOeVHAFaGJeZJKKvTSQnhbO448-FmWxXgboCMULWp6shT1_MWlzL_EHUzJX1Mjra2NH690UWbtEulkORYvfjAdlyz0bwaeMPiUXQ53GMpmg8BjSe0aUprmUZrmJ40nGF1w7XZEs0k0CkKX8._v_tQtH_oqVgd6cYnWQURQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODgsInNlY3JldCI6IjFjYTQ4NTNkM2NmYjk4Nzc5NTUyYTUzZmE4NmNlNjRhIiwic2VydmljZSI6IlN0ZWFtIn0.MXWjkMN77nPUhK5p3SHoVOcBdRiwjQpO1DoBDFm26Wg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: openresty\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"41-0AeMVzV1pApYTMktTMxeiuYqqUg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/manifest.js?v=VWHoUUnZEI3s\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/javascript/applications/store/manifest.js?v=VWHoUUnZEI3s\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"WDdmbV6IeWE8\"\r\nx-integrity: \"sha384-W2QTmuBLmFGHq+tSV1UO9FTKv0plZmE9Za6r7gZBIvv/hTBl4kXX7hgIO4PTKRZz\"\r\nlast-modified: Sun, 03 May 1970 14:00:39 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1776143021.685747,VS0,VE171\r\ncontent-length: 13551\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26850,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (26687)","md5":"5837666d5e8879613c039a0193734dcd","sha1":"943b28db845022f9cad8cb2f13921989a76fc43d","sha256":"1a39b1624b9614f9405bfa965c6442debba9cebd1c5ead99f65bbf94a47edf96","sha512":"216c6ff252f47c4838a46b12953c5f288fe7f0051b078ec571ff0166844e98d3bc55ab69b828b5f22a73e3f13383faabe26d48664a5445b080dec91597cbd1ce","ssdeep":"384:+JREUCPxf+PdsfHwm/dtxTeEgu+sKw+dA6pV1vDhnfjWSYyqXcwn9zbHRAw1XA3L:SnCJmuwlsKw+2ehnVYrRZbHRAw1XmLn","tlshash":"0bc2397dbf3cafda796c18d7add687b460982c1da855148280edf3150207e247b12eaf","first_seen":"2026-04-07T23:13:46.428Z","last_seen":"2026-04-14T05:04:29.173712Z","times_seen":25,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/x9x9.gif","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:41.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/images/x9x9.gif HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/gif\r\nlast-modified: Tue, 24 Feb 2026 23:58:16 GMT\r\netag: \"699e3b18-3a\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1616\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1776143021.698708,VS0,VE1\r\ncontent-length: 58\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":58,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 9 x 9","md5":"c85b970b4c832e361445c1b446cc2343","sha1":"57e60c2f1f1f919a871b7c171c6d59d42e3adbe5","sha256":"5ce28d7cf05f0e6eeaa3788a393d9980e9b51130963c6b9672d3447b6b11de6d","sha512":"060b2ba825cd60ea3fad5fcace496a77b528210aeab0092a24b4c438eb2acac4166e0c3b704cd3a4d8fa8fb034b0c7a4b5f45e242a7bdad26580f3236382620e","ssdeep":"","tlshash":"b9a00244859d9430d154a4330d1517555b6cb101865c2f32716911249d4b4a015a7264","first_seen":"2023-05-02T13:29:25Z","last_seen":"2026-08-06T03:27:26.677454Z","times_seen":1881,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/images/popups/btn_arrow_down_padded.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:41.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://store.fastly.steamstatic.com/public/shared/css/shared_global.css?v=LkH7FFmHUNxE\u0026l=english\u0026_cdn=fastly\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:12 GMT\r\netag: \"649bb1f0-a1\"\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:41 GMT\r\nvia: 1.1 varnish\r\nage: 1726\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 32\r\nx-timer: S1776143022.691264,VS0,VE0\r\ncontent-length: 161\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":161,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced","md5":"f2dae37acac6b9d5a91caf1885c2f7d0","sha1":"5f80fdde9f702a1d7589bc5faf88c14066e26c32","sha256":"93b1fbe4f6245b62bfd4c8c3347abe0fe67ed711315e59bfadaebc9873d8d9b5","sha512":"8d7ff7133ab97d81985c50fa8fd93916b42b1ce812af21bc732dcae45d59b9154fcc965857235d925c471db191dfb79c0753c70c7a4d5b0285b908e396216805","ssdeep":"","tlshash":"95c08cc1bb64ed58dad20363a596802084a30a844a53836ca9a6c875023aa01c8d1f46","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-08-08T16:24:09.017781Z","times_seen":3658,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:41.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gift-everyone.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://store.fastly.steamstatic.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/octet-stream\r\nlast-modified: Wed, 28 Jun 2023 04:07:10 GMT\r\netag: \"649bb1ee-1e490\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:41 GMT\r\nvia: 1.1 varnish\r\nage: 5550\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 162\r\nx-timer: S1776143022.716598,VS0,VE0\r\ncontent-length: 124048\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":124048,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaSans","md5":"2d64caa5ecbf5e42cbb766ca4d85e90e","sha1":"147420abceb4a7fd7e486dddcfe68cda7ebb3a18","sha256":"045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f","sha512":"c96556ec57dac504919e806c7df536c4f86892b8525739289b2f2dbbf475de883a4824069dbdd4bb1770dd484f321563a00892e6c79d48818a4b95406bf1af96","ssdeep":"1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9","tlshash":"86c35c06f706d709dd240e3df9a1a3a9b358f8a57b1fcb0fa6856d65fc8e0852a441cc","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-08-09T02:12:59.913902Z","times_seen":7052,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=NXam5zydzNu8\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/shared/javascript/jquery-1.8.3.min.js?v=NXam5zydzNu8\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Sun, 18 May 2025 23:42:36 GMT\r\netag: \"NXam5zydzNu8\"\r\nx-integrity: \"sha384-lifoBlbdwizTl3Yoe612uhI3AcOam/QtWkozF7SuiACaf5UJl5reOYu4MigVxrCH\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nage: 437369\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 11384\r\nx-timer: S1776143021.632460,VS0,VE0\r\ncontent-length: 33378\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":93636,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65483)","md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-08-09T06:47:43.941246Z","times_seen":37508,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=tvQi85mXnRZH\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/shared/javascript/shared_responsive_adapter.js?v=tvQi85mXnRZH\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"gUb9Yt6p2z2h\"\r\nx-integrity: \"sha384-KthprshTLKxBz11RYKDmMCw5yrdD1snsIznVw8LP0/FQ4mmjRPhGgKhA8bgpJ7ML\"\r\nlast-modified: Sun, 03 May 1970 14:00:39 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1776143021.659681,VS0,VE152\r\ncontent-length: 6983\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24290,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"8146fd62dea9db3da12b85d0b3559fdf","sha1":"05dd708beea63c8a8fda3073c005dcaeed81ff9f","sha256":"99613a4590fe4087b95c7d56aed1e79340d563113c5cb117a2bed5ddf7a174e9","sha512":"4d1d1fb0392748fe358d6008a5dba0c77fabfe21a5c5424828cf6316cfc2800c9e5715e526dde89279bfd934eaf34a6a2e7a7db300c0c4c8b4d23363895113be","ssdeep":"384:4AGUcz6olWUtpanMMY5CqHB0tRZM7ZEQx/kjHBc2gdXf7h6oq:4AG7z7WUtpwYZB0TAEosjHCNZ7A","tlshash":"f0b2b5a9fb5e1276817a321c2b5f24cf327c88f8710a9c827d70255c7a9655e03e6f4e","first_seen":"2026-04-02T12:53:50.667508Z","last_seen":"2026-04-14T14:33:09.696944Z","times_seen":58,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/css/applications/store/main.css?v=aJPspEhMdgzn\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/css/applications/store/main.css?v=aJPspEhMdgzn\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"pwrn_FLWhyVf\"\r\nx-integrity: \"sha384-9u/bD1ZWuHaW3LB0rbbnm3OCynW5yKtaLXg/YMjExezvCiRKPj5ilDaD1HUDfqV3\"\r\nlast-modified: Sun, 03 May 1970 14:00:39 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 14 Apr 2026 05:03:41 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1776143021.683795,VS0,VE771\r\ncontent-length: 66214\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":258708,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (23410)","md5":"a70ae7fc52d687255fd25ed75a346b64","sha1":"8fa0b586c65d5b0a433cc2f1e62da94863d98a59","sha256":"d1d4cd9412d4b8584f71d60fe76577afd1b7c93f150155304701dffe661f07d7","sha512":"54a1790b3c1bda6b9fd610ea405470855ca0f97f9c3d470a4db356a74b552257654475a7bef5d70cc21d539d9a88c858c8b04e213902914ce0d3dae733bc7a92","ssdeep":"6144:IlYAodqYEurXrZ6WkiRaY+a7dmVuLMmZeOdhH4+66U6p17Wyvx:eYAerXus","tlshash":"ea441a30fa1070bb6913927e53e0ea5cb528e006ed322b7e7f55315191ca2ff19e7a16","first_seen":"2026-04-07T23:13:46.413166Z","last_seen":"2026-04-14T05:04:29.173109Z","times_seen":27,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":784,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=vNpZeOuePA4R\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/javascript/applications/store/libraries~b28b7af69.js?v=vNpZeOuePA4R\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"2YtNk3cAAsTl\"\r\nx-integrity: \"sha384-j8DUTTrSS/ngwiAShFD8wx2MVrlHtMnFZdSEWQGrtzfE8kIyV8O1pfm0Znjcs/MN\"\r\nlast-modified: Sun, 03 May 1970 14:00:39 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:41 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1776143021.690008,VS0,VE1198\r\ncontent-length: 190768\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":648054,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65373)","md5":"d98b4d93770002c4e566be1ccfcf028a","sha1":"4f927947ec87887e209b4366982d9805f94de97e","sha256":"c4c141f9d32d32b42455b4317f7a03677c1483b4854c76d977044128d75a4402","sha512":"d9d9beccc9a16bc6deb0e59643c23a7764e61e052b86ab02e5a24b6f7cfb4d3182a38d8babad64f9cf21861e41786a56ed3b722c02e7f8cfc498ba032d253570","ssdeep":"6144:2FNa32VjkUHzaMMFeVaQDGq+a2BdM82srXuvn0ty0ME71aTk0xO:x1MMFeVaQDGq6M82sr+yy0MaaBO","tlshash":"dbd43bc87161f42957a351b5146f100bb73a291a984c86e4f268dcda38f9d8ea13ff3d","first_seen":"2026-04-07T23:13:46.42166Z","last_seen":"2026-06-16T01:49:36.343045Z","times_seen":125,"resource_available":true,"data":null}},"time_used":1220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1211,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-14","alert":"Hunting_JS_WebAssembly","trigger":"store.fastly.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=vNpZeOuePA4R\u0026l=english\u0026_cdn=fastly","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/shoppingcart_english-json.js?contenthash=146859bc56e69e9f2b9d","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:42.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/javascript/applications/store/shoppingcart_english-json.js?contenthash=146859bc56e69e9f2b9d HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\nlast-modified: Tue, 03 Feb 2026 23:32:23 GMT\r\netag: \"cFLz9AyOvE52\"\r\ncache-control: public,max-age=259200,must-revalidate\r\nexpires: Fri, 06 Feb 2026 23:35:08 GMT\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:42 GMT\r\nvia: 1.1 varnish\r\nage: 100636\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 17861\r\nx-timer: S1776143022.307089,VS0,VE0\r\ncontent-length: 19158\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19158,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18991)","md5":"432b7567b3746da80f417706ac9875ea","sha1":"a104ef860bce667630ccfad9b979af6061882b31","sha256":"c91142de9b7f5810cdfaead2a8d29e64df659ab9ea07b52765b07fa89dfd95e0","sha512":"e181983360b370728fcd68a68cfbc431e2f13c7286092d9ed53a4e697697c3626718c5af898d21e0bf6d2823c508a20e6b7067be45d11265ada91ed6cc56e7e6","ssdeep":"384:+46r1G9IBaL79GTdyIqgYjgpJVB5ZYTzvbjDp4gwZ:Q8IBaL79GTdyIqgYjgpJVB5ZYTzvbjDc","tlshash":"bf82734acd6553776de34ba0bed6a64f83b4a2d20274f9904fc8056d324f6c284bfd88","first_seen":"2026-02-08T10:13:57.113192Z","last_seen":"2026-06-16T01:49:36.319477Z","times_seen":169,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gift-everyone.cfd/a578f6fcea17657d6481f19e42037c78282141786b3b/0f9f9b7353dd14632e413ca29802c60d2da486d00d90.css","fqdn":"gift-everyone.cfd","domain":"gift-everyone.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.105","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gift-everyone.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 02:24:17 GMT","end":"Fri, 10 Jul 2026 02:24:16 GMT"},"fingerprint":{"sha1":"CD:F9:2A:89:00:B4:27:81:5A:84:EA:08:73:CB:4D:75:1D:BF:1A:2A","sha256":"D2:B5:02:E8:BF:09:52:6E:99:A9:DA:20:7A:9C:48:C6:82:B2:B7:AB:4B:8E:98:B3:3F:B1:35:89:3E:F2:20:3F"}}},"request":{"raw":"GET /a578f6fcea17657d6481f19e42037c78282141786b3b/0f9f9b7353dd14632e413ca29802c60d2da486d00d90.css HTTP/1.1\r\nHost: gift-everyone.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.LXrU1lm4MniN_MHCfEm0GrEq6qyOGRNK.Pt6IT-NvNJZwtxoG.MLXRguliAN-UiIb6yi2oA8q1pdXdFtI8Z1JSwugzAVzom-28p3G2ojQnLDnvDKTPHBiQaYrK6-MuhHbSiZlZH9jv7esCE0x1zO22u0ckbbvKOiOVDNYCc1k01QU9Dl7KCvOgAjsta6dszOTxWOeVHAFaGJeZJKKvTSQnhbO448-FmWxXgboCMULWp6shT1_MWlzL_EHUzJX1Mjra2NH690UWbtEulkORYvfjAdlyz0bwaeMPiUXQ53GMpmg8BjSe0aUprmUZrmJ40nGF1w7XZEs0k0CkKX8._v_tQtH_oqVgd6cYnWQURQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODgsInNlY3JldCI6IjFjYTQ4NTNkM2NmYjk4Nzc5NTUyYTUzZmE4NmNlNjRhIiwic2VydmljZSI6IlN0ZWFtIn0.MXWjkMN77nPUhK5p3SHoVOcBdRiwjQpO1DoBDFm26Wg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: openresty\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"41-0AeMVzV1pApYTMktTMxeiuYqqUg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"gift-everyone.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/prototype-1.7.js?v=npJElBnrEO6W\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:40.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/javascript/prototype-1.7.js?v=npJElBnrEO6W\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Tue, 14 Jul 2026 21:19:11 GMT\r\netag: \"npJElBnrEO6W\"\r\nx-integrity: \"sha384-YAoVVYkeHRpvvpvjRNZKi3AQxIO+hBZtpxGVOlZ4znfcRalb6uUpKX7XvCg9FgiS\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nage: 1647341\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 5173\r\nx-timer: S1776143021.645216,VS0,VE0\r\ncontent-length: 37134\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":163315,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"9e92449419eb10ee96c56d803d2baa43","sha1":"5a2be7055866b8f35bd852d466ff590251a56d89","sha256":"a655fc19da796630bcf37112ccf749898e98c99e1b25bccef0bf3573665195e5","sha512":"19d0c715d50abf41cccf0a96bf9c4673c5059d8a0a9edddc00c243ae44e403e1b3641c8e7c3e57b58746423b0679af216398648a6a1a4f50f394a9c15104fb32","ssdeep":"1536:Pe/hr8bCUSFPlpV7N+XS+st304cM9FmKZFDlYUo7pKMaV/6FzKKVA8MjjOH2X1Ix:PIr8bCBPlp0u9F6UodjaVbX1oYVpwxA8","tlshash":"99f3309c7de66035822bf13e5a9f418cf27980171408ed55b89c85a46fb0d3896fafec","first_seen":"2023-10-31T01:09:46Z","last_seen":"2026-08-09T02:12:59.9159Z","times_seen":2592,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/ico/ico_facebook.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:41.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 15:02:51 GMT","end":"Sat, 23 May 2026 15:02:50 GMT"},"fingerprint":{"sha1":"88:1B:96:F6:C3:5C:18:CF:3A:87:5C:D4:B0:93:C0:F2:B1:8F:58:4C","sha256":"A9:4B:06:4F:F5:89:03:A5:44:97:04:26:10:EC:84:01:64:5A:6E:30:0D:52:BC:85:63:51:76:F5:28:DE:0D:4B"}}},"request":{"raw":"GET /public/images/ico/ico_facebook.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 06 Dec 2023 00:00:29 GMT\r\netag: \"656fb99d-489\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 05:03:40 GMT\r\nvia: 1.1 varnish\r\nage: 45432\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 21\r\nx-timer: S1776143021.709201,VS0,VE0\r\ncontent-length: 1161\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"e406e5a22e4f3cfa580d3bb57420150e","sha1":"5b381e535bb0ce6003a461f3124fa1238dfbcedb","sha256":"760589f903c5e9bd169b38f941f9a3dc88a23897e9cc5b622d3d91f5c204b9e4","sha512":"e33cb7bd10104a1e8c2d3f2b3885d65ef3769f7250445c8341d6d2ad2367749ccdc48daabe4ea39cb80ee0362af9d01e48370db858ba01f956a1a6b8c04217c1","ssdeep":"","tlshash":"8f216355fab02a91b45cc9c22ce9c4178c470081f5e4f4babdcac4466c770fa42aa9cb","first_seen":"2023-12-07T16:24:37Z","last_seen":"2026-08-05T12:54:36.520646Z","times_seen":2436,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recaptcha.net/recaptcha/enterprise.js?render=explicit","fqdn":"recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gift-everyone.cfd/751a2f557504500d574655260c0103000b070404550d","date":"2026-04-14T05:03:42.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:37:19 GMT","end":"Mon, 15 Jun 2026 08:37:18 GMT"},"fingerprint":{"sha1":"AF:24:D1:B1:7C:0A:99:F6:97:09:DB:87:16:44:87:D3:F7:CD:1D:D8","sha256":"4B:82:44:93:D3:83:30:BB:56:E0:D7:B5:10:2E:63:28:9B:7E:13:E3:E4:65:2E:BA:FC:85:C3:86:AD:E1:E5:4A"}}},"request":{"raw":"GET /recaptcha/enterprise.js?render=explicit HTTP/1.1\r\nHost: recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Tue, 14 Apr 2026 05:03:42 GMT\r\ndate: Tue, 14 Apr 2026 05:03:42 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1067,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1067), with no line terminators","md5":"0912c5ccf11b70afed2c15707fa1de9a","sha1":"6078f4b08ea2bc19fd8bd17b66ca3f23b74e89a5","sha256":"9754e7e173e0d6fedad135c662d575b6a6812ac966227c71fab3356ed2248e6e","sha512":"cb055b29576c598ae84f5fad4a9a2b4a9eaf2ff316bf697d7bff31f9c7aaf4823e1d19a959b9c93f17818fb0b9050eb8469ffa1b1ed64da8cc1a4d3bfc079800","ssdeep":"","tlshash":"e51112b21705b03e0b7319a5d2facab1e842701cb11c49eca502da843e6acdbce05a99","first_seen":"2026-04-14T01:03:22.792586Z","last_seen":"2026-04-30T11:48:18.280435Z","times_seen":19,"resource_available":true,"data":null}},"time_used":830,"timings":{"blocked":169,"dns":469,"connect":8,"send":0,"wait":20,"receive":0,"ssl":161},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}