{"report_id":"bb66336a-eb62-4517-8bea-6dc24f3ad445","version":6,"status":"done","tags":[],"date":"2025-08-31T06:27:10Z","url":{"schema":"http","addr":"steamconmuntiy.com","fqdn":"steamconmuntiy.com","domain":"steamconmuntiy.com","tld":"com"},"ip":{"addr":"172.67.141.200","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"steamconmuntiy.com/","fqdn":"steamconmuntiy.com","domain":"steamconmuntiy.com","tld":"com"},"title":"Navi Roulette"},"submit":{"url":{"schema":"http","addr":"steamconmuntiy.com","fqdn":"steamconmuntiy.com","domain":"steamconmuntiy.com","tld":"com"},"ip":{"addr":"172.67.141.200","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-05T06:27:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"steamconmuntiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi66.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"steamconmuntiy.com","ip":{"addr":"172.67.141.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-09","domain_rank":0,"first_seen":"2022-11-14T16:59:07Z","last_seen":"2025-08-27T10:08:46.475962Z","alert_count":7,"request_count":7,"received_data":1109336,"sent_data":6485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.postimg.cc","ip":{"addr":"46.105.222.81","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"2016-06-11","domain_rank":103883,"first_seen":"2018-04-11T10:01:12Z","last_seen":"2025-08-28T07:02:56.869966Z","alert_count":0,"request_count":6,"received_data":1264685,"sent_data":2496,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2025-08-24T20:17:40.39662Z","alert_count":0,"request_count":8,"received_data":7026582,"sent_data":3258,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"navi66.com","ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2025-04-09","domain_rank":0,"first_seen":"2022-04-23T09:58:21Z","last_seen":"2025-08-27T10:08:46.344138Z","alert_count":3,"request_count":3,"received_data":118288,"sent_data":1506,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"steamconmuntiy.com/","fqdn":"steamconmuntiy.com","domain":"steamconmuntiy.com","tld":"com"},"ip":{"addr":"172.67.141.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f47aff43fdd43a7f32a868180cea00d8","sha1":"dbf6a81cf165e79fae1c9aea1ff2499244872a45","sha256":"a1f6ac8ed9f420baa9da1ac6d60077c30f4919ce3aecc1db4e8ccbc1d286cbd8","sha512":"f14a70ef69b1dbbee57e6f9f9aecdf4e7bb6f46e776dda3e38ea0424c6ed577489876b2dc3c3c6abbd71736928d6969fd7e64704b9cd905f09014f081be901f8","ssdeep":"768:I9zDjAFZYzxf2205QXId662jnXSZae6kShO:I9zDjAgf2cu6pSZaelt","tlshash":"b0f2a347646ae37682f210d6c21a25d3e649ff717d1ca51bb3936d0ef34ce80d7a8229","size":34841,"data":"","first_seen":"2025-08-20T14:36:50.2093Z","last_seen":"2025-09-08T00:12:31.5336Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamconmuntiy.com/75417f002b5352","fqdn":"steamconmuntiy.com","domain":"steamconmuntiy.com","tld":"com"},"ip":{"addr":"172.67.141.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"54321899c989564a90170d0ab69a494f","sha1":"f5fcf7e68671ee92e5bb9b1797186491e1300366","sha256":"d685b4ca1d8d39c4f1c9af5f24a2e7a1f2044f6b336e5560e298e981af1bf1a2","sha512":"2d474a35f07b8b517da8591e87b100d9e7e523e44c3d01182f31ed8298efd12223f8e2caff5e328e8c31583ca9ea14b3cadbc483d01ae60246181730123db9b5","ssdeep":"1536:Glv/9rnn1SaTcYkNfIh5KY7HiMs8Pc69Bz8EvwJToLsvOzIUnXdqN82:GlVq637Hir6Mo1Xd6","tlshash":"03741e9a6ae22570a213f13e0eafa8403235980b1f5cfc523a4cd5645f5953c97f6fe8","size":337317,"data":"","first_seen":"2025-08-27T10:08:47.183475Z","last_seen":"2025-08-31T06:27:14.223213Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamconmuntiy.com/75417f002b5352","fqdn":"steamconmuntiy.com","domain":"steamconmuntiy.com","tld":"com"},"ip":{"addr":"172.67.141.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"be792c2f1e833b9bcbd172729d9755b6","sha1":"0a225822ce6cbf49f8238aad52d9039e9263504d","sha256":"aa257c807a915b48c69d8e6a803bd5353fba406843c81c64bdf8db00848d0568","sha512":"39ad70706abd1d90a2cf5f9892af887b0417f889a3da1e8e0bcadebf4cef112d3dbd07347106d14223a4ff1b61f0ca62ec1cd271c63e31e9082b75887e77af83","ssdeep":"1536:vXFRiIVpk75zIZnJc/l1eZTHF3wqLIy1LCBNSfqXaqMnpinDqtjzdYQ4rjoFPjQU:iZ0Y/MASwCdpC7pE","tlshash":"e4244f5bbaf268705253f078892fd801b235481f095ebd493e4c56a9af0e83c66f1fd9","size":221625,"data":"","first_seen":"2025-08-27T10:08:47.186423Z","last_seen":"2026-05-13T09:47:03.016055Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamconmuntiy.com/75417f002b5352","fqdn":"steamconmuntiy.com","domain":"steamconmuntiy.com","tld":"com"},"ip":{"addr":"172.67.141.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"acb09f7eff12b0d6baea6b9826e3795f","sha1":"2d8bf9c9bf249e058d4d3420302d81993dfd9b5c","sha256":"c9939b7b66582b097e8aec24c017cecfdfdc7e0ba5c69ca74b69eb358937f2f9","sha512":"cecc5c12de9435478f054bdff22d846ec1aa5c6756f921f2a672a1a32c5aa261660475d3979f988a1f1d3e646a4cc180e2c3a6c3616446009697a3638df3b08e","ssdeep":"","tlshash":"6151225a6af270b46213f57d4a6fd846b16a4817086cfd017e1c9260af2643c4bf8bde","size":2725,"data":"","first_seen":"2025-08-27T10:08:47.188713Z","last_seen":"2026-05-13T09:47:03.018142Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamconmuntiy.com/75417f002b5352","fqdn":"steamconmuntiy.com","domain":"steamconmuntiy.com","tld":"com"},"ip":{"addr":"172.67.141.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf6386cc575747bcfb39d74eefc67c3a","sha1":"5e2ef0342b956f9f542300763d6d14d0d90d3fb6","sha256":"173ff47278558d3b2fb6ae3cc0a76663e07e7de09a6877c31ac865d9dbb9ff18","sha512":"4853387ac5cb2b31e55fd97642b41cb01ca4e7e2e1d4d3eea4e16159abd97758c9f3d43f0520e87be4c21d743043a0a4bdcac58c5ee69036aa5fc1b47f3c5eb2","ssdeep":"","tlshash":"1801f70a38f278205263f0a8861f6819b6b6550b18edad027a4c91916f26c3c55a1ec8","size":835,"data":"","first_seen":"2025-08-27T10:08:47.190688Z","last_seen":"2026-05-13T09:47:03.019036Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamconmuntiy.com/75417f002b5352","fqdn":"steamconmuntiy.com","domain":"steamconmuntiy.com","tld":"com"},"ip":{"addr":"172.67.141.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c92c7ee91e252412185487345364bf4b","sha1":"f5c11b43ef0beb1c0c7bb6d65efb0bc15b589395","sha256":"75177aae01b4d8ccfb6492bb9bd0551275e755d81f401a4a710f67109e25d018","sha512":"044b98fd23b6fdc3bc4399d354257c0af4026c0c8bc896989271eeaa24bacdb9cf35fc36e0ecb8d03bf1156deb2bf4684b1e84ca5257ca4411c715c9b4b8c2fb","ssdeep":"384:LjSw7j1OQRe5s7CH9PRjUtB7hcjYk4HCmI7C19Dvn4T4o/Fg27ODzVL14:XSwP1ks7C9PlU3CjY/CmDVvn2gW","tlshash":"4d23a42b98b42a622c537060786f9b4db617010f9d587d247bec81600f1dd9fa2fdbac","size":47766,"data":"","first_seen":"2025-08-27T10:08:47.192558Z","last_seen":"2026-03-21T01:55:14.88118Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamconmuntiy.com/75417f002b5352","fqdn":"steamconmuntiy.com","domain":"steamconmuntiy.com","tld":"com"},"ip":{"addr":"172.67.141.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b534adb611ebb6736ac06e98c9c9cab8","sha1":"a2f5285c1398c5a85705cd16195f496aed1a6f33","sha256":"b62f57fd3c0f570e5ed259f8a42de4d1dd4cf3893211e99b9a878f2a8c3f4818","sha512":"133f88164d90819fad4bbff7e83576f61a925050271548483ba86dbef560e40a5873f983d83c8c7ec6832cd319b82e886b96499afd751c64479206a4758be7ec","ssdeep":"768:hXjVaYCak8Qrcjj52rTveeO97z5pAf3NR3PNgpezLLY//30Nc+I+dk8OvVMCaZD+:BVX8cjj4rO7z58XNc+I+dk8vwUDk7d","tlshash":"6873c7449a82608456a777782b1f60f0e777081f0c88bd4b799c6ad9cf1d92ecef0979","size":80586,"data":"","first_seen":"2025-08-27T10:08:47.19514Z","last_seen":"2026-05-13T09:47:03.0206Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamconmuntiy.com/75417f002b5352585f56544e.js","fqdn":"steamconmuntiy.com","domain":"steamconmuntiy.com","tld":"com"},"ip":{"addr":"172.67.141.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2e6ad803bf88fccbb72961e43ff429e","sha1":"56db95479f7810e9f542e83e4377cabe81302695","sha256":"b861218899fc72b61ba992e171c944d7ac565eee89bc63ed07478b012e052bcd","sha512":"58e558e0e8c1c6d832aea879f4a65528172e692a7fdad4182adf525f2230fd59ddb7ddee9c6544dddcc4e01ede6c03b5af0209d2ac650b19331d239964f38b60","ssdeep":"3072:IF28YS9B8IXmtDaMMaIEwRp2ZZ2+tNlVuOp5JapFssb4unk2jSw3mK+k:IMu9B/Rp2ZZ2+tNl3p7oZkQLP+k","tlshash":"0944974067c0a85c239b9b7a771fb4e9f42a05af3d89494fd101fc506aaa607fef9530","size":258551,"data":"","first_seen":"2025-08-20T14:36:50.101551Z","last_seen":"2025-09-08T00:38:20.00241Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"steamconmuntiy.com/75417f002b535241505554605d165944","fqdn":"steamconmuntiy.com","domain":"steamconmuntiy.com","tld":"com"},"ip":{"addr":"172.67.141.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:52.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamconmuntiy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Jul 2025 14:20:10 GMT","end":"Sun, 12 Oct 2025 15:16:39 GMT"},"fingerprint":{"sha1":"88:E1:89:48:65:65:17:B3:A0:33:DD:2F:28:26:7E:54:39:C9:BB:A4","sha256":"C5:91:FB:13:59:42:5B:97:15:95:A0:3B:ED:D1:E3:CA:54:15:C6:7D:CE:C0:38:1B:A8:5E:95:17:49:FA:29:EE"}}},"request":{"raw":"POST /75417f002b535241505554605d165944 HTTP/1.1\r\nHost: steamconmuntiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://steamconmuntiy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.BLEE0sncypC4djgeXmdJdSojv9_I183s.Kk62wfAxT4JA_eo6.S9Q24yg-IelgVds0_DTyWPJ9aJNDz56TA2psdHqAqbNzfPvMpcEVSvmuZFyhO-xnnFYOn-3niRNI77Vz88PNWwJjxg5euodMY7O-fLZclcFJa8sWYK_G4sCDFQzIVS3PdROuIjZKU1Qnx65f222i4QyvqphcPq95biKR_Rx8mHQCfQFv4ILZF-PnjjDIIjhQ6tNVcoA_UZe_Xgr9V470-9Q6IrBOPBT_3Q.65RM7IpMSqUCrjq_RAP5QQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTAwMiwic2VjcmV0IjoiMTgxYWZiMTExMjE2NGUwMDA4NzExYzcwMmU1OTJjYWEiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.lkWSGNH2dm269Ry7D76Koh4n-J76iiuDaDWmYP5dFss\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 201 Created\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Sun, 31 Aug 2025 06:26:52 GMT\r\netag: W/\"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sLDUh%2FgZxGjDUYz%2FHVf6UGOYVSBPQssYWqeYI1MfkoKhORHU7XIybgwyuAu9CjK0qAVL7W0YzHHtT%2BocWs2P7Z4am6sgxPrWoxPo8rEKYXo%3D\"}]}\r\ncf-ray: 977a75775c6f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-10T23:40:52.24677Z","times_seen":181286,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"steamconmuntiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/t4W3Wx5J/bg-bottom-4f6cbda1.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"46.105.222.81","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:48.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 02:47:56 GMT","end":"Sat, 15 Nov 2025 02:47:55 GMT"},"fingerprint":{"sha1":"20:6C:66:66:68:F7:B4:5E:C5:99:09:F7:0A:73:95:2A:A3:88:22:EF","sha256":"A5:63:1D:6D:11:2D:26:7C:BE:F7:F6:A9:F4:F8:3E:22:50:5C:25:D9:66:3A:A5:C5:08:CC:5C:C7:9E:29:4E:ED"}}},"request":{"raw":"GET /t4W3Wx5J/bg-bottom-4f6cbda1.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 389203\r\nlast-modified: Sun, 13 Apr 2025 12:58:04 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":389203,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 651, 8-bit/color RGBA, non-interlaced","md5":"18d84bb82e97b3b94cb1a3dbb43ed5b1","sha1":"247491d302c325400645c689f0336b6fe662b8af","sha256":"367cc9f2e071ea8a84626e454138a1889170f3dedeb01b20c1fa0e7d39eb57b7","sha512":"70c5d117ac10e56a2d0aa93f9ae81cdcd67d785a2bc7ccf52e5b5353b1e91c90ed3b57ff27101d78000dd07b499bba8909e32fd3fc1c83c550345d7a54c9fe5f","ssdeep":"6144:73OGiRynOX27Sa91X6Yj1m8USYruApDSGbH3nZZXaj/H0dpVal42xrkbLwW2e7d:bF7DSa3h1mc6e63ef01/or+N2e7d","tlshash":"6f8423f79fa563f2b8a01c6311db75762298b2255d76259cbff3c8098acd5c00b503ad","first_seen":"2025-08-27T10:08:47.158827Z","last_seen":"2026-05-13T09:47:03.011406Z","times_seen":8,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamconmuntiy.com/_next/static/media/2b36e1e8f1bfdd5e-s.p.woff","fqdn":"steamconmuntiy.com","domain":"steamconmuntiy.com","tld":"com"},"ip":{"addr":"172.67.141.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:48.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamconmuntiy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Jul 2025 14:20:10 GMT","end":"Sun, 12 Oct 2025 15:16:39 GMT"},"fingerprint":{"sha1":"88:E1:89:48:65:65:17:B3:A0:33:DD:2F:28:26:7E:54:39:C9:BB:A4","sha256":"C5:91:FB:13:59:42:5B:97:15:95:A0:3B:ED:D1:E3:CA:54:15:C6:7D:CE:C0:38:1B:A8:5E:95:17:49:FA:29:EE"}}},"request":{"raw":"GET /_next/static/media/2b36e1e8f1bfdd5e-s.p.woff HTTP/1.1\r\nHost: steamconmuntiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.BLEE0sncypC4djgeXmdJdSojv9_I183s.Kk62wfAxT4JA_eo6.S9Q24yg-IelgVds0_DTyWPJ9aJNDz56TA2psdHqAqbNzfPvMpcEVSvmuZFyhO-xnnFYOn-3niRNI77Vz88PNWwJjxg5euodMY7O-fLZclcFJa8sWYK_G4sCDFQzIVS3PdROuIjZKU1Qnx65f222i4QyvqphcPq95biKR_Rx8mHQCfQFv4ILZF-PnjjDIIjhQ6tNVcoA_UZe_Xgr9V470-9Q6IrBOPBT_3Q.65RM7IpMSqUCrjq_RAP5QQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTAwMiwic2VjcmV0IjoiMTgxYWZiMTExMjE2NGUwMDA4NzExYzcwMmU1OTJjYWEiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.lkWSGNH2dm269Ry7D76Koh4n-J76iiuDaDWmYP5dFss\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncontent-length: 65\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\netag: W/\"41-0AeMVzV1pApYTMktTMxeiuYqqUg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpFNziwkVN3HCpZquPIlOkZb11OTdRBcXzKw%2BfXyBIJknSD%2FQPpyM%2FLYU%2Bab3URu5Nz1pZO5gBseRn3K%2Fp5wUR%2FV71HRwO%2FSYhhdKN7C4I8%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 977a755e7b2b56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6688d59f1d0b9e116ceca1708a113d0d","sha1":"d0078c573575a40a584cc92d4ccc5e8ae62aa948","sha256":"cacc3c09d432702d237265c156358a0430dd08938afbceaf4a444d26340b25e8","sha512":"116612441c802eae5cdfa4441c5757ee48298f865e1ff4e164ae1ba9ab2a0856c7e2e5c023864eee6963eda1bb89d6edcc7951c4b566eca2aac989a66ef510a4","ssdeep":"","tlshash":"b4a0020c084b7aad4f52c4bd75cd7d3488564ac015a119615189d438825464e8845588","first_seen":"2024-08-02T16:52:12Z","last_seen":"2026-08-10T01:04:51.333882Z","times_seen":1824,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"steamconmuntiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamconmuntiy.com/75417f002b5352565446625f4000735f5e5e5e56","fqdn":"steamconmuntiy.com","domain":"steamconmuntiy.com","tld":"com"},"ip":{"addr":"172.67.141.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:48.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamconmuntiy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Jul 2025 14:20:10 GMT","end":"Sun, 12 Oct 2025 15:16:39 GMT"},"fingerprint":{"sha1":"88:E1:89:48:65:65:17:B3:A0:33:DD:2F:28:26:7E:54:39:C9:BB:A4","sha256":"C5:91:FB:13:59:42:5B:97:15:95:A0:3B:ED:D1:E3:CA:54:15:C6:7D:CE:C0:38:1B:A8:5E:95:17:49:FA:29:EE"}}},"request":{"raw":"GET /75417f002b5352565446625f4000735f5e5e5e56 HTTP/1.1\r\nHost: steamconmuntiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.BLEE0sncypC4djgeXmdJdSojv9_I183s.Kk62wfAxT4JA_eo6.S9Q24yg-IelgVds0_DTyWPJ9aJNDz56TA2psdHqAqbNzfPvMpcEVSvmuZFyhO-xnnFYOn-3niRNI77Vz88PNWwJjxg5euodMY7O-fLZclcFJa8sWYK_G4sCDFQzIVS3PdROuIjZKU1Qnx65f222i4QyvqphcPq95biKR_Rx8mHQCfQFv4ILZF-PnjjDIIjhQ6tNVcoA_UZe_Xgr9V470-9Q6IrBOPBT_3Q.65RM7IpMSqUCrjq_RAP5QQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTAwMiwic2VjcmV0IjoiMTgxYWZiMTExMjE2NGUwMDA4NzExYzcwMmU1OTJjYWEiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.lkWSGNH2dm269Ry7D76Koh4n-J76iiuDaDWmYP5dFss\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6nw866zcoTQgTBucgcGWgG%2F0JNEdnmYXE4Fl69hC1Vjwd4s7zpnK3cJGl4VNOoDucayn%2BqxD2b79B%2FUEhvOnroBkgm2VbUwByHFgVm5X0%2FM%3D\"}]}\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\netag: W/\"120-DoBfebeDqFlT4XYtvX+4xht5vmo\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 977a755f2b4856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":288,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b24bfd16378ee5e411abcd7c26a69df2","sha1":"0e805f79b783a85953e1762dbd7fb8c61b79be6a","sha256":"f612f9fd4e230d3a5d74438270e269945c4d14d29294c4ec1e02132bd42ec8ec","sha512":"f898bfe75b28744b8e075611a9fd13b878488ae7d05bfc6aec649502ee207e47e0e9ae9b4e2d6b25fe3f9c7f6da1e2c27dadfb6658460abb7d7ba14a7d5d40cc","ssdeep":"","tlshash":"c7d02b1244ac906adb009100405b3f4fd6bd1b2344c4b81e76bc873299fc2eb2409eaf","first_seen":"2025-08-31T06:27:14.209648Z","last_seen":"2025-08-31T06:27:14.209648Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"steamconmuntiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/jPC1gXw9/button-open-d7dd6b6c.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:48.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:17:47 GMT","end":"Sun, 16 Nov 2025 07:17:46 GMT"},"fingerprint":{"sha1":"30:62:E2:16:F0:8D:8F:C4:30:EF:67:44:60:2F:45:29:D1:5B:AF:94","sha256":"EE:AB:93:C9:6B:44:94:94:F6:EE:CA:98:DE:CE:BF:A6:25:9F:C8:76:A5:43:59:77:38:DD:D2:23:F7:9C:B1:70"}}},"request":{"raw":"GET /jPC1gXw9/button-open-d7dd6b6c.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 41251\r\nlast-modified: Sat, 19 Apr 2025 20:29:01 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 494 x 118, 8-bit/color RGBA, non-interlaced","md5":"e8ef544f958d34fde2a758bcf1e9fd76","sha1":"986a0819679b8221fa057e7b8aba4f982691ec89","sha256":"104fd15457dfba2050ce627d817e1981c3d45c427999143ad228ffea7c28c5d3","sha512":"23d4d6f6da2aa35a1aefd15be2a6042112d16331ce9278aa9f806575866b2ade87668bd9671605a1272779ac526bc157186019c8178f6c20fc9dec154a800fad","ssdeep":"768:Ca4EWkbgLQODARuBxh2zO2jiO2BWPxHlhEu1xja7l8S2HldNOCKErHd:CaShLxcuBSrRlh31c8dHlqCKErHd","tlshash":"b403f2a9cd63d3dcb036645751fe22e47a425362025fee2186eb8225cce73d981c3f5a","first_seen":"2025-03-25T21:21:04.766463Z","last_seen":"2026-05-13T09:47:03.00667Z","times_seen":29,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/BVPc6Njp/button-start-e161a054.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:48.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:17:47 GMT","end":"Sun, 16 Nov 2025 07:17:46 GMT"},"fingerprint":{"sha1":"30:62:E2:16:F0:8D:8F:C4:30:EF:67:44:60:2F:45:29:D1:5B:AF:94","sha256":"EE:AB:93:C9:6B:44:94:94:F6:EE:CA:98:DE:CE:BF:A6:25:9F:C8:76:A5:43:59:77:38:DD:D2:23:F7:9C:B1:70"}}},"request":{"raw":"GET /BVPc6Njp/button-start-e161a054.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 43251\r\nlast-modified: Sat, 19 Apr 2025 20:28:07 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 590 x 198, 8-bit/color RGBA, non-interlaced","md5":"fee4b9ee7aa7fb903edef4b3690a695c","sha1":"d97c17984288ba71d133383b4867b6d4639981b2","sha256":"67e4155acc95920eccd99eea4995d09fe9880b160da8c7e60b1cf78c089afb1e","sha512":"6eedbdff5133d167b3d7f10930fe0e3bd10702ebbc7cedae245b28e424515f46f3c3f81c1a49f6781335dda743c3672c18c42cb2b09632744a7edacb82112296","ssdeep":"768:kxInKhLnjO84Rpv/Fs07ehanXaUj/Ucor9iqLfurtIlIaXqgmiA1PYphb1uKM+yp:yIWnnWJ7EaXbczkqLfu/iDmIp+KMaO","tlshash":"b413d0a8cd8b19910bf65576c8d2414fb81c3dca971421bf3e981a45dfc1f51636baf0","first_seen":"2025-03-25T21:21:04.817281Z","last_seen":"2026-05-13T09:47:02.986719Z","times_seen":20,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/RkXLWy6M/vCO2f23.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:48.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:17:47 GMT","end":"Sun, 16 Nov 2025 07:17:46 GMT"},"fingerprint":{"sha1":"30:62:E2:16:F0:8D:8F:C4:30:EF:67:44:60:2F:45:29:D1:5B:AF:94","sha256":"EE:AB:93:C9:6B:44:94:94:F6:EE:CA:98:DE:CE:BF:A6:25:9F:C8:76:A5:43:59:77:38:DD:D2:23:F7:9C:B1:70"}}},"request":{"raw":"GET /RkXLWy6M/vCO2f23.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1164170\r\nlast-modified: Sat, 19 Apr 2025 20:35:39 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1164170,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1328 x 1668, 8-bit/color RGBA, non-interlaced","md5":"5109c3c0da9aeedc22a127f793233dbd","sha1":"b0a073b141ca9707a7df08c6cdf159a11de36795","sha256":"356757168651beeee04914fcd82e7810267a682c6914ad2f4583ed645f1ca9f2","sha512":"e222c7ca8de94c0f44023cf113a13e132a44b30b5ff027ba17d0f8e4c6db8fbb0416da38ca39d6a8ea0e568e33fa70404ddae97c210bcc5669d8a49db8206b46","ssdeep":"24576:n2CBh6ccdh4dJ/ceG58tXgoFj1/0rKFT1V0bVw2LQUkbOLD:2uhBcfs0AtwY5crKt1VKVw7Uk6n","tlshash":"c9252326a7ffcc6ad210c1f17f1aa9e3764571630b0b639266b451b1a028fdd310da9f","first_seen":"2025-08-27T10:08:47.138038Z","last_seen":"2026-05-13T09:47:02.998541Z","times_seen":8,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamconmuntiy.com/","fqdn":"steamconmuntiy.com","domain":"steamconmuntiy.com","tld":"com"},"ip":{"addr":"172.67.141.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-31T06:26:47.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamconmuntiy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Jul 2025 14:20:10 GMT","end":"Sun, 12 Oct 2025 15:16:39 GMT"},"fingerprint":{"sha1":"88:E1:89:48:65:65:17:B3:A0:33:DD:2F:28:26:7E:54:39:C9:BB:A4","sha256":"C5:91:FB:13:59:42:5B:97:15:95:A0:3B:ED:D1:E3:CA:54:15:C6:7D:CE:C0:38:1B:A8:5E:95:17:49:FA:29:EE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: steamconmuntiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 06:26:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qEDRrvuf3%2BUEbLyiIeFDIlqyFc2%2F52aPX6smAF5woMvUgw6PgR6%2Bc5XRdCIBnC%2B%2FsKJtk2fyrlpfnibgf%2FzGNlON47d5YBeMTsYIGrJ1mqM%3D\"}]}\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\nset-cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.BLEE0sncypC4djgeXmdJdSojv9_I183s.Kk62wfAxT4JA_eo6.S9Q24yg-IelgVds0_DTyWPJ9aJNDz56TA2psdHqAqbNzfPvMpcEVSvmuZFyhO-xnnFYOn-3niRNI77Vz88PNWwJjxg5euodMY7O-fLZclcFJa8sWYK_G4sCDFQzIVS3PdROuIjZKU1Qnx65f222i4QyvqphcPq95biKR_Rx8mHQCfQFv4ILZF-PnjjDIIjhQ6tNVcoA_UZe_Xgr9V470-9Q6IrBOPBT_3Q.65RM7IpMSqUCrjq_RAP5QQ; SameSite=Lax; Path=/; Expires=Sun, 31 Aug 2025 10:26:47 GMT\ntoken=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTAwMiwic2VjcmV0IjoiMTgxYWZiMTExMjE2NGUwMDA4NzExYzcwMmU1OTJjYWEiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.lkWSGNH2dm269Ry7D76Koh4n-J76iiuDaDWmYP5dFss; SameSite=Lax; Path=/; Expires=Sun, 31 Aug 2025 10:26:47 GMT\r\ncf-ray: 977a75563f1d56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35444,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (34858)","md5":"b31a910586cfcbf248f03129e60a3125","sha1":"96e3d36e1d3ba23734523b799b145268a86c314e","sha256":"df44a1e86aee71cb0b5704e8acc64e44f0d1b7d41c109960ebb56a97435be004","sha512":"ee888abe2e6e309499879e08ea019ff6f9fd33f6a938eb2cd6cfda5009facbd910a3c12a38e4e0a4e7942f0758f1cfb9673b8b63cc6b89671cd1775865314d15","ssdeep":"768:tf9zDjAFZYzxf2205QXId662jnXSZae6kShZ:tf9zDjAgf2cu6pSZaelE","tlshash":"57f2a447646ae37682f210d6c21a25d3e649ff717d1ca50bb3936d0ef34ce80d7a8229","first_seen":"2025-08-27T10:08:47.10992Z","last_seen":"2025-08-31T06:27:14.212273Z","times_seen":4,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":46,"dns":25,"connect":1,"send":0,"wait":223,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"steamconmuntiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/Dy20Bbnm/favicon.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"46.105.222.81","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamconmuntiy.com/","date":"2025-08-31T06:26:47.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 02:47:56 GMT","end":"Sat, 15 Nov 2025 02:47:55 GMT"},"fingerprint":{"sha1":"20:6C:66:66:68:F7:B4:5E:C5:99:09:F7:0A:73:95:2A:A3:88:22:EF","sha256":"A5:63:1D:6D:11:2D:26:7C:BE:F7:F6:A9:F4:F8:3E:22:50:5C:25:D9:66:3A:A5:C5:08:CC:5C:C7:9E:29:4E:ED"}}},"request":{"raw":"GET /Dy20Bbnm/favicon.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 31 Aug 2025 06:26:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 35911\r\nlast-modified: Sun, 13 Apr 2025 13:22:46 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35911,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"3065e7e4791f0fdb9003709e9a2cfad4","sha1":"4ee6b96de797a74df6ef8bdc01efca2f78147046","sha256":"05107a30a80f8f920599275d13154ab59f4cabafcc85767abf71125fd124239c","sha512":"a5fc49d512efe61504876a3216fdba309fcc44e486d1bf4276074efd5509ee2e47c45e3fd3f8db18678ee560fa310f2424365333b21677ae007795550545cf86","ssdeep":"768:vBEYbEGxJ3fBJWl135S5YEgPHySnrkJtXXjMOTQEbqcD7AYZt:iYZWL3GYEMHyqQJpjIEGTYZt","tlshash":"f0f2e03b5cd08b8ca6696325be7e1b9aace04b470dcfc1456c823098deadef51d39448","first_seen":"2025-08-27T10:08:47.166793Z","last_seen":"2026-05-13T09:47:03.002336Z","times_seen":8,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":1,"connect":23,"send":0,"wait":28,"receive":31,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navi66.com/_next/static/media/2b36e1e8f1bfdd5e-s.p.woff","fqdn":"navi66.com","domain":"navi66.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:48.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi66.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Jun 2025 12:44:33 GMT","end":"Thu, 25 Sep 2025 12:44:32 GMT"},"fingerprint":{"sha1":"59:0E:CF:00:6D:4C:18:57:39:3B:8C:7C:15:03:00:FA:5D:84:9C:10","sha256":"E3:27:0B:92:38:1C:EA:A2:52:BE:09:1A:18:67:2D:41:CF:77:67:15:EB:A7:B4:2C:F2:6B:FA:27:4A:B1:43:53"}}},"request":{"raw":"GET /_next/static/media/2b36e1e8f1bfdd5e-s.p.woff HTTP/1.1\r\nHost: navi66.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://steamconmuntiy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Gf9BsbVNgp8Vv52I; Domain=.navi66.com; Path=/; Expires=Sun, 31-Aug-2025 06:46:48 GMT\n__ddg10_=1756621608; Domain=.navi66.com; Path=/; Expires=Sun, 31-Aug-2025 06:46:48 GMT\n__ddg9_=91.90.42.154; Domain=.navi66.com; Path=/; Expires=Sun, 31-Aug-2025 06:46:48 GMT\n__ddg1_=2WUMsiNJp8V8qWUfa6sv; Domain=.navi66.com; HttpOnly; Path=/; Expires=Mon, 31-Aug-2026 06:26:48 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\ncontent-type: font/woff\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:00:21 GMT\r\netag: W/\"9404-1959ed39408\"\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":37892,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 37892, version 0.0","md5":"82d7c60ca56318d5574a3e88f197c509","sha1":"63cf578c4ffc4f3cf9bbbce09b46176372f1ce5c","sha256":"a8c87e22fdc2213c42ee708df62ecef8847712ad02e37e544ce57cfdf7d4b6e9","sha512":"f2ec085c8c208ad2cb060eb79bc07037b2092ca49e6ea9e0ba3f4a1dcede3c40159a635e2a55243463a4fe800e5aa1461237bcb7d882dca9dbe1144424c14b90","ssdeep":"768:HvU3nWkEskh+2sJGFjzN44iE59C06/eLNpw6qsz/n4nA7oTnmSRry:HmfEsE+5JGdzN+Ei/ehpTqsjn+Tnm3","tlshash":"5d03020da8739706f86b2f3ca7ef0fd48898897c7d11d92bc0210b9144b58af6b479b5","first_seen":"2024-08-19T17:34:14.53642Z","last_seen":"2026-05-03T18:40:44.925634Z","times_seen":25,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":186,"dns":1,"connect":19,"send":0,"wait":56,"receive":0,"ssl":164},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi66.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/gZB5GnDg/ITlJC1H.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:48.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:17:47 GMT","end":"Sun, 16 Nov 2025 07:17:46 GMT"},"fingerprint":{"sha1":"30:62:E2:16:F0:8D:8F:C4:30:EF:67:44:60:2F:45:29:D1:5B:AF:94","sha256":"EE:AB:93:C9:6B:44:94:94:F6:EE:CA:98:DE:CE:BF:A6:25:9F:C8:76:A5:43:59:77:38:DD:D2:23:F7:9C:B1:70"}}},"request":{"raw":"GET /gZB5GnDg/ITlJC1H.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1145879\r\nlast-modified: Sat, 19 Apr 2025 20:31:04 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1145879,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1316 x 1668, 8-bit/color RGBA, non-interlaced","md5":"bb004d06cdaad16232e8ee8f2dbcb3fc","sha1":"180b7e41d7b62ee6c3ef9cd88cf3e1fb65b1df2e","sha256":"6ad5cc0b0e58557be22f1e4c20f52adb9dfb4b8a6d9cd2b06662f0efbdaeeefd","sha512":"07de56fd1ea8faea3c1d13724baa343a47188b0f01cc39215134ed23c4180cd7ea1678092134ca4deeffff3910819dc7173a124265ccb05223798b185f58773b","ssdeep":"12288:4pEw1ZQ46Nzz4rXRpbs4lEg4Cc/3CqgRVwzDKYd0a9jomrNpsIi21cn8bDmsYK++:4tXUlMjRtcqBwzrT9jbrDX1cnQaFyX","tlshash":"d225339cc4684036a129114eccc236d8fa7f5c5c8e3b45e6d7b7d1ee4a466e3c848dae","first_seen":"2025-08-27T10:08:47.145065Z","last_seen":"2026-05-13T09:47:03.010093Z","times_seen":8,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":135,"dns":63,"connect":24,"send":0,"wait":82,"receive":162,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/d0phnhPq/VrizGQq.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:48.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:17:47 GMT","end":"Sun, 16 Nov 2025 07:17:46 GMT"},"fingerprint":{"sha1":"30:62:E2:16:F0:8D:8F:C4:30:EF:67:44:60:2F:45:29:D1:5B:AF:94","sha256":"EE:AB:93:C9:6B:44:94:94:F6:EE:CA:98:DE:CE:BF:A6:25:9F:C8:76:A5:43:59:77:38:DD:D2:23:F7:9C:B1:70"}}},"request":{"raw":"GET /d0phnhPq/VrizGQq.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1125567\r\nlast-modified: Sat, 19 Apr 2025 20:33:42 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1125567,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1624 x 1660, 8-bit/color RGBA, non-interlaced","md5":"098313114112a6c13ec6e97af287b176","sha1":"e296e21bacac01062878d9989a0329c6b11f877e","sha256":"07bfa2287b6cc1bec0e0b1b0081a1fc87d096a6c793c6090b46d14ead0b89073","sha512":"2b354238cc1d1e440b79b623deda1f9091fbf476f78039405170836da217ccd5bf3243e4b6ba96f9da30c5dbc3e624ac58332f7e9f49476c443f47aa022a4f4d","ssdeep":"24576:JCDJEfbhJIRSUbLeS0SnKEcDDdTnTMPd2Vu/2s1:JCDJElJIUSnpIVYgg+u","tlshash":"cc25236845cbe8fec553ea3d42a83d9b7751ccfe2de06143d93ef990587ab9208188c5","first_seen":"2025-08-27T10:08:47.173836Z","last_seen":"2026-05-13T09:47:02.996538Z","times_seen":8,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":126,"dns":63,"connect":21,"send":0,"wait":22,"receive":249,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/PrZyz9fd/decor-e57ce5c2.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"46.105.222.81","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:48.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 02:47:56 GMT","end":"Sat, 15 Nov 2025 02:47:55 GMT"},"fingerprint":{"sha1":"20:6C:66:66:68:F7:B4:5E:C5:99:09:F7:0A:73:95:2A:A3:88:22:EF","sha256":"A5:63:1D:6D:11:2D:26:7C:BE:F7:F6:A9:F4:F8:3E:22:50:5C:25:D9:66:3A:A5:C5:08:CC:5C:C7:9E:29:4E:ED"}}},"request":{"raw":"GET /PrZyz9fd/decor-e57ce5c2.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 7360\r\nlast-modified: Sun, 13 Apr 2025 13:04:20 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 440, 8-bit/color RGBA, non-interlaced","md5":"53deb875ba9e7eb108a87a9fd8d97797","sha1":"261e9802e146319706f4f25e06bbd7ce12cc18c7","sha256":"0db1e3c7d33b678f1b6868233a96e4a94ba4ee558608b41bad1de34f7661d00b","sha512":"a3a8f99fec0312a465c844db3933f2428fa4b0da032a787d7bc57329545485874f7c74d256fc1ce61dbcbef0aeb45742c282499acd618ba30625c45f8634829d","ssdeep":"96:HrSFbUQN0l6Q9M4r0Z89SJWSfwOYQL58KL+4MLRVA8HzShUPfd2:HrS9tNG6G0ZNYMT+4cVAVhUHd2","tlshash":"83e14cd0daf09ec7f11119ba95a6078d73213dcb9e81cb3b069866902dd3988cdcb988","first_seen":"2025-08-27T10:08:47.156556Z","last_seen":"2026-05-13T09:47:03.006067Z","times_seen":8,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/sXQ7fGv3/team-shine-0d1438cb.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"46.105.222.81","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:48.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 02:47:56 GMT","end":"Sat, 15 Nov 2025 02:47:55 GMT"},"fingerprint":{"sha1":"20:6C:66:66:68:F7:B4:5E:C5:99:09:F7:0A:73:95:2A:A3:88:22:EF","sha256":"A5:63:1D:6D:11:2D:26:7C:BE:F7:F6:A9:F4:F8:3E:22:50:5C:25:D9:66:3A:A5:C5:08:CC:5C:C7:9E:29:4E:ED"}}},"request":{"raw":"GET /sXQ7fGv3/team-shine-0d1438cb.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 585604\r\nlast-modified: Sun, 13 Apr 2025 13:09:14 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":585604,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1189 x 556, 8-bit/color RGBA, non-interlaced","md5":"5dc4dad5ae7fc39dccd1b35b13fc693e","sha1":"5ebdb3e907f0482eb06ddcc10ecdf30a43dc2ae0","sha256":"7d3b44909b43c21dd7665f2449fef61f985f8d1ff806da21de059f049e0114b1","sha512":"dfed61a940d6593b3f0ec5237b985badda8e4dbb1c4d4245cc7d6d8443d817d35eb6ac5cef75428c31a2083a34c8735363c037ff2c6095a4c876919d10f4dcaf","ssdeep":"12288:/gdkVrTMAgPkh7D2m7Epbemzyv3uFzIRq:/gMMdkh7D/Alhmi","tlshash":"cdc423caacc775b2d4ecc9d3869bb961e4f6120ee59305c65122f42344e363be6dc892","first_seen":"2025-03-25T21:21:04.829009Z","last_seen":"2026-05-13T09:47:03.007327Z","times_seen":29,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/7ZnNjzTc/decor-case-11242405.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"46.105.222.81","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:48.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 02:47:56 GMT","end":"Sat, 15 Nov 2025 02:47:55 GMT"},"fingerprint":{"sha1":"20:6C:66:66:68:F7:B4:5E:C5:99:09:F7:0A:73:95:2A:A3:88:22:EF","sha256":"A5:63:1D:6D:11:2D:26:7C:BE:F7:F6:A9:F4:F8:3E:22:50:5C:25:D9:66:3A:A5:C5:08:CC:5C:C7:9E:29:4E:ED"}}},"request":{"raw":"GET /7ZnNjzTc/decor-case-11242405.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 241249\r\nlast-modified: Sun, 13 Apr 2025 13:04:41 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":241249,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 746 x 440, 8-bit/color RGBA, non-interlaced","md5":"54bedce20ec7429f3bd03ba332bfdd88","sha1":"ee49c96c886af5d42f0d812401b7230e3ab4fae0","sha256":"996e5bf249a90391ecff872615e79a4b67435998a5769c29633e482cd3c47497","sha512":"87648080bde634b84bc7866e9074f889edbc5003c7257bacf967792051469452e34eba384c36dcbb89cd389fc2c5893f7222a36213c65aa044dd137c8a4185e6","ssdeep":"6144:4wtiLZPyTjBzxyqFwuNqxIZvznOdVuzB5S6c4K3rFpjW:Die81m1LOdVkB5S6c4go","tlshash":"6534238f46a902544526fbaed094950f3d4321b742a0bf51bad04e1fda42bffcd1da23","first_seen":"2025-03-25T21:21:04.836774Z","last_seen":"2026-05-13T09:47:03.009434Z","times_seen":20,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamconmuntiy.com/75417f002b5352585f56544e.js","fqdn":"steamconmuntiy.com","domain":"steamconmuntiy.com","tld":"com"},"ip":{"addr":"172.67.141.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:48.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamconmuntiy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Jul 2025 14:20:10 GMT","end":"Sun, 12 Oct 2025 15:16:39 GMT"},"fingerprint":{"sha1":"88:E1:89:48:65:65:17:B3:A0:33:DD:2F:28:26:7E:54:39:C9:BB:A4","sha256":"C5:91:FB:13:59:42:5B:97:15:95:A0:3B:ED:D1:E3:CA:54:15:C6:7D:CE:C0:38:1B:A8:5E:95:17:49:FA:29:EE"}}},"request":{"raw":"GET /75417f002b5352585f56544e.js HTTP/1.1\r\nHost: steamconmuntiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.BLEE0sncypC4djgeXmdJdSojv9_I183s.Kk62wfAxT4JA_eo6.S9Q24yg-IelgVds0_DTyWPJ9aJNDz56TA2psdHqAqbNzfPvMpcEVSvmuZFyhO-xnnFYOn-3niRNI77Vz88PNWwJjxg5euodMY7O-fLZclcFJa8sWYK_G4sCDFQzIVS3PdROuIjZKU1Qnx65f222i4QyvqphcPq95biKR_Rx8mHQCfQFv4ILZF-PnjjDIIjhQ6tNVcoA_UZe_Xgr9V470-9Q6IrBOPBT_3Q.65RM7IpMSqUCrjq_RAP5QQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTAwMiwic2VjcmV0IjoiMTgxYWZiMTExMjE2NGUwMDA4NzExYzcwMmU1OTJjYWEiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.lkWSGNH2dm269Ry7D76Koh4n-J76iiuDaDWmYP5dFss\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-disposition: inline\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\nlast-modified: Tue, 19 Aug 2025 09:18:20 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VKZ7o2Kg4yabIqaqJuVljIvo1P9J1%2B2TI4RHRkS2Ar8R8N7Xr1x2FtAJOQO4EGeKaeleaQEKsqnWFo%2FoGhtpaiFr%2F7C2lbS6AJEz3P1fjrE%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 977a755b8b1556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258551,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f2e6ad803bf88fccbb72961e43ff429e","sha1":"56db95479f7810e9f542e83e4377cabe81302695","sha256":"b861218899fc72b61ba992e171c944d7ac565eee89bc63ed07478b012e052bcd","sha512":"58e558e0e8c1c6d832aea879f4a65528172e692a7fdad4182adf525f2230fd59ddb7ddee9c6544dddcc4e01ede6c03b5af0209d2ac650b19331d239964f38b60","ssdeep":"3072:IF28YS9B8IXmtDaMMaIEwRp2ZZ2+tNlVuOp5JapFssb4unk2jSw3mK+k:IMu9B/Rp2ZZ2+tNl3p7oZkQLP+k","tlshash":"0944974067c0a85c239b9b7a771fb4e9f42a05af3d89494fd101fc506aaa607fef9530","first_seen":"2025-08-20T14:36:50.101551Z","last_seen":"2025-09-08T00:38:20.00241Z","times_seen":41,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"steamconmuntiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi66.com/_next/static/media/4e81fe9cba68eadc-s.p.woff","fqdn":"navi66.com","domain":"navi66.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:48.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi66.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Jun 2025 12:44:33 GMT","end":"Thu, 25 Sep 2025 12:44:32 GMT"},"fingerprint":{"sha1":"59:0E:CF:00:6D:4C:18:57:39:3B:8C:7C:15:03:00:FA:5D:84:9C:10","sha256":"E3:27:0B:92:38:1C:EA:A2:52:BE:09:1A:18:67:2D:41:CF:77:67:15:EB:A7:B4:2C:F2:6B:FA:27:4A:B1:43:53"}}},"request":{"raw":"GET /_next/static/media/4e81fe9cba68eadc-s.p.woff HTTP/1.1\r\nHost: navi66.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://steamconmuntiy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ug7zGyjz9OK0YD6q; Domain=.navi66.com; Path=/; Expires=Sun, 31-Aug-2025 06:46:48 GMT\n__ddg10_=1756621608; Domain=.navi66.com; Path=/; Expires=Sun, 31-Aug-2025 06:46:48 GMT\n__ddg9_=91.90.42.154; Domain=.navi66.com; Path=/; Expires=Sun, 31-Aug-2025 06:46:48 GMT\n__ddg1_=So7mrkUw1alXyolt5K4o; Domain=.navi66.com; HttpOnly; Path=/; Expires=Mon, 31-Aug-2026 06:26:48 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\ncontent-type: font/woff\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:00:08 GMT\r\netag: W/\"8ecc-1959ed36140\"\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36556,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 36556, version 0.0","md5":"989947b092774c1d2811236856bbdcc3","sha1":"ea98b81bd2692f0be4331f20e2b304a6258b1ba1","sha256":"6a156519b783c083e2c25ed5c49c00dd956d6be26a347ef09a77221abbed33e9","sha512":"440fa0acd6f1c6e30cfb8aa4de56009579a17153a020c6714b56a9ba8104eee0807402db06817b0c3a338be7366cd5789f964dbcc338a2d6dd0056eb0d24ad2d","ssdeep":"768:8M3Mo0JBe4eVCT6M+D+AHn4WsoJavUMowRb6mr:8M3kJBZkhYAH4H5vUvw0mr","tlshash":"9cf201c2897cf25a6920c8f66cefb9e3a53535d7cc613b09105ba9ad0263017b88493a","first_seen":"2023-04-07T01:55:32Z","last_seen":"2026-08-10T04:06:07.225814Z","times_seen":738,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":89,"dns":1,"connect":21,"send":0,"wait":131,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi66.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/0jTcXddQ/uVpA9At.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:48.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:17:47 GMT","end":"Sun, 16 Nov 2025 07:17:46 GMT"},"fingerprint":{"sha1":"30:62:E2:16:F0:8D:8F:C4:30:EF:67:44:60:2F:45:29:D1:5B:AF:94","sha256":"EE:AB:93:C9:6B:44:94:94:F6:EE:CA:98:DE:CE:BF:A6:25:9F:C8:76:A5:43:59:77:38:DD:D2:23:F7:9C:B1:70"}}},"request":{"raw":"GET /0jTcXddQ/uVpA9At.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1191400\r\nlast-modified: Sat, 19 Apr 2025 20:30:17 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1191400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1176 x 1660, 8-bit/color RGBA, non-interlaced","md5":"4aa97538f7ff3fae9ba00ce329b92a86","sha1":"3ae1acde1fc032d242ffdf0d049eca284c18e435","sha256":"a92cff950da15e76f865fab13ff0e8b9f9ea27d81de530b8680f4e7253dd61bb","sha512":"a3987724cd0fdd43f76b8019936259cd89beb8ee93c3dd4ec1236a97e742fb887d20751ed21434c12a25c6f3857cb4e0f43cb0f8119f40d63c63b426ef4139b0","ssdeep":"24576:lOiKXPXfpVT33aIB1ydqZDyLsv8s0bwJWjWOOjUWW:lOi09BcdqcLa8pbw8jWHUWW","tlshash":"1425335488e094c3dd151078f3b109baca2c1fb964d39fb9a67888d67ac4c4969c7cbf","first_seen":"2025-08-27T10:08:47.118846Z","last_seen":"2026-05-13T09:47:03.010771Z","times_seen":8,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":134,"dns":71,"connect":24,"send":0,"wait":86,"receive":134,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/HWTD5LC/gJSZkKA.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:48.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:17:47 GMT","end":"Sun, 16 Nov 2025 07:17:46 GMT"},"fingerprint":{"sha1":"30:62:E2:16:F0:8D:8F:C4:30:EF:67:44:60:2F:45:29:D1:5B:AF:94","sha256":"EE:AB:93:C9:6B:44:94:94:F6:EE:CA:98:DE:CE:BF:A6:25:9F:C8:76:A5:43:59:77:38:DD:D2:23:F7:9C:B1:70"}}},"request":{"raw":"GET /HWTD5LC/gJSZkKA.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1172387\r\nlast-modified: Sat, 19 Apr 2025 20:36:49 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1172387,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1308 x 1664, 8-bit/color RGBA, non-interlaced","md5":"208b10242fce83c77949f9ba2dfaaa96","sha1":"634cc9f17aa2c6ff8f4f2baaaaa2b77d5f2905d7","sha256":"03cde4f14c111538b652cf8d1d1fb87ad2425fd01c164c8e27a2d0f49557896c","sha512":"8249a7310e81c3f329c074ea950d98d1d3c98bef7715a2f0c5d00e9039b339b8c32643b08b8f1fdecdc276444ee3f45c98a00b722431a3057bde88c48652c180","ssdeep":"12288:uu4j7mRxR+Zy8LyClQy3OeG8GQ9f86pWTtX1r5BhZvkOj7jOGvkwtLiXd91Ce6X6:uu4XORGyMflft2o8fTBlcircUiLWuD","tlshash":"ee2523f968facc11670793bd3c4a3829507505c13485137b539ba5268d192fb8bf7bca","first_seen":"2025-08-27T10:08:47.162556Z","last_seen":"2026-05-13T09:47:03.005397Z","times_seen":8,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/3wb2HFrL/team-lines-8a64e266.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"46.105.222.81","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:48.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 02:47:56 GMT","end":"Sat, 15 Nov 2025 02:47:55 GMT"},"fingerprint":{"sha1":"20:6C:66:66:68:F7:B4:5E:C5:99:09:F7:0A:73:95:2A:A3:88:22:EF","sha256":"A5:63:1D:6D:11:2D:26:7C:BE:F7:F6:A9:F4:F8:3E:22:50:5C:25:D9:66:3A:A5:C5:08:CC:5C:C7:9E:29:4E:ED"}}},"request":{"raw":"GET /3wb2HFrL/team-lines-8a64e266.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 3179\r\nlast-modified: Sun, 13 Apr 2025 13:08:53 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3179,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1110 x 175, 8-bit/color RGBA, non-interlaced","md5":"2500f9879e1b636968e1826fefc8cc6c","sha1":"0419055cfe475b2379a6548fe2f11cdb123bbf6c","sha256":"9a97322023b5d925cfd29e421209ff49f66d4af9bc5ff738a103b3b13d0cf0f0","sha512":"ea548a8686f5e7203d93a4a2c483da0739cde60e733a6cab643066bc6cc9497cd032e460e7dfbe9b8257521cfdfb85d0bdfec3116857ef9d10c6ea6bc4f8c0e4","ssdeep":"","tlshash":"7861ac7ed651385421ab8d87b12949fd7e74021d5130844fef40e6eeadecc07e92dda0","first_seen":"2025-03-25T21:21:04.807916Z","last_seen":"2026-05-13T09:47:03.003547Z","times_seen":29,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamconmuntiy.com/_next/static/media/4e81fe9cba68eadc-s.p.woff","fqdn":"steamconmuntiy.com","domain":"steamconmuntiy.com","tld":"com"},"ip":{"addr":"172.67.141.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:48.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamconmuntiy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Jul 2025 14:20:10 GMT","end":"Sun, 12 Oct 2025 15:16:39 GMT"},"fingerprint":{"sha1":"88:E1:89:48:65:65:17:B3:A0:33:DD:2F:28:26:7E:54:39:C9:BB:A4","sha256":"C5:91:FB:13:59:42:5B:97:15:95:A0:3B:ED:D1:E3:CA:54:15:C6:7D:CE:C0:38:1B:A8:5E:95:17:49:FA:29:EE"}}},"request":{"raw":"GET /_next/static/media/4e81fe9cba68eadc-s.p.woff HTTP/1.1\r\nHost: steamconmuntiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.BLEE0sncypC4djgeXmdJdSojv9_I183s.Kk62wfAxT4JA_eo6.S9Q24yg-IelgVds0_DTyWPJ9aJNDz56TA2psdHqAqbNzfPvMpcEVSvmuZFyhO-xnnFYOn-3niRNI77Vz88PNWwJjxg5euodMY7O-fLZclcFJa8sWYK_G4sCDFQzIVS3PdROuIjZKU1Qnx65f222i4QyvqphcPq95biKR_Rx8mHQCfQFv4ILZF-PnjjDIIjhQ6tNVcoA_UZe_Xgr9V470-9Q6IrBOPBT_3Q.65RM7IpMSqUCrjq_RAP5QQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTAwMiwic2VjcmV0IjoiMTgxYWZiMTExMjE2NGUwMDA4NzExYzcwMmU1OTJjYWEiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.lkWSGNH2dm269Ry7D76Koh4n-J76iiuDaDWmYP5dFss\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncontent-length: 65\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\netag: W/\"41-0AeMVzV1pApYTMktTMxeiuYqqUg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mjxtlygmabpbjA3gBbamE7YA9MMEd3ZzpfEV9KA24VLgMrc1zpvkZHgQ6jsNHvdrQZox%2FnwDOkM0v6FgAL8i8LsF%2BLgWS3w%2BS7%2BOxz9QtZY%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 977a755e6b2a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6688d59f1d0b9e116ceca1708a113d0d","sha1":"d0078c573575a40a584cc92d4ccc5e8ae62aa948","sha256":"cacc3c09d432702d237265c156358a0430dd08938afbceaf4a444d26340b25e8","sha512":"116612441c802eae5cdfa4441c5757ee48298f865e1ff4e164ae1ba9ab2a0856c7e2e5c023864eee6963eda1bb89d6edcc7951c4b566eca2aac989a66ef510a4","ssdeep":"","tlshash":"b4a0020c084b7aad4f52c4bd75cd7d3488564ac015a119615189d438825464e8845588","first_seen":"2024-08-02T16:52:12Z","last_seen":"2026-08-10T01:04:51.333882Z","times_seen":1824,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"steamconmuntiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamconmuntiy.com/75417f002b5352","fqdn":"steamconmuntiy.com","domain":"steamconmuntiy.com","tld":"com"},"ip":{"addr":"172.67.141.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://steamconmuntiy.com/","date":"2025-08-31T06:26:47.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steamconmuntiy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Jul 2025 14:20:10 GMT","end":"Sun, 12 Oct 2025 15:16:39 GMT"},"fingerprint":{"sha1":"88:E1:89:48:65:65:17:B3:A0:33:DD:2F:28:26:7E:54:39:C9:BB:A4","sha256":"C5:91:FB:13:59:42:5B:97:15:95:A0:3B:ED:D1:E3:CA:54:15:C6:7D:CE:C0:38:1B:A8:5E:95:17:49:FA:29:EE"}}},"request":{"raw":"POST /75417f002b5352 HTTP/1.1\r\nHost: steamconmuntiy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 48\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.BLEE0sncypC4djgeXmdJdSojv9_I183s.Kk62wfAxT4JA_eo6.S9Q24yg-IelgVds0_DTyWPJ9aJNDz56TA2psdHqAqbNzfPvMpcEVSvmuZFyhO-xnnFYOn-3niRNI77Vz88PNWwJjxg5euodMY7O-fLZclcFJa8sWYK_G4sCDFQzIVS3PdROuIjZKU1Qnx65f222i4QyvqphcPq95biKR_Rx8mHQCfQFv4ILZF-PnjjDIIjhQ6tNVcoA_UZe_Xgr9V470-9Q6IrBOPBT_3Q.65RM7IpMSqUCrjq_RAP5QQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTAwMiwic2VjcmV0IjoiMTgxYWZiMTExMjE2NGUwMDA4NzExYzcwMmU1OTJjYWEiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.lkWSGNH2dm269Ry7D76Koh4n-J76iiuDaDWmYP5dFss\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 201 Created\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rxAEbjt4pPZVE6yLmt47fQhUyPoVUpMs7ldE5CxOL%2FbTdZcUD1hkdzxxbwyj8Ok3BwIeVINq%2FwSBW%2BcqHbsEZVcLW13PHW%2FI%2BE2E1DIB0cA%3D\"}]}\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 977a75592b0156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":807286,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1122)","md5":"ea32531b6c1e126029a77f65b0ad541d","sha1":"dca2ad87244a35ba23d2b8611857bc3ed5932f0e","sha256":"0968435bd1bc6837677eb552bd1ad8446c31a402bca3408290110075821a8ea6","sha512":"82f4f6f5a02a2abe0110f99e54eb1f1104daebe77db4ee75f72349374f490f92c6bf0c4623deb2d72438a814d2ca052844a7c021c5828e028108863f3d6ea4a4","ssdeep":"3072:xvlVq637Hir6Mo1XdgZ0Y/MASwCdpC7p53QFhqXNc+I+dk8v7k7OD:3Yv6M6iZTCw4w7pGFhgk7OD","tlshash":"6a05b34a7ae228709213f1384a6f98547236880b0e5dfc563e4c95a89f0d53c97f6fed","first_seen":"2025-08-31T06:27:14.220114Z","last_seen":"2025-08-31T06:27:14.220114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"steamconmuntiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi66.com/_next/static/media/87ddd3229135f8c9-s.p.woff","fqdn":"navi66.com","domain":"navi66.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:48.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi66.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Jun 2025 12:44:33 GMT","end":"Thu, 25 Sep 2025 12:44:32 GMT"},"fingerprint":{"sha1":"59:0E:CF:00:6D:4C:18:57:39:3B:8C:7C:15:03:00:FA:5D:84:9C:10","sha256":"E3:27:0B:92:38:1C:EA:A2:52:BE:09:1A:18:67:2D:41:CF:77:67:15:EB:A7:B4:2C:F2:6B:FA:27:4A:B1:43:53"}}},"request":{"raw":"GET /_next/static/media/87ddd3229135f8c9-s.p.woff HTTP/1.1\r\nHost: navi66.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://steamconmuntiy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=nIKnmfU2Pn0479oK; Domain=.navi66.com; Path=/; Expires=Sun, 31-Aug-2025 06:46:48 GMT\n__ddg10_=1756621608; Domain=.navi66.com; Path=/; Expires=Sun, 31-Aug-2025 06:46:48 GMT\n__ddg9_=91.90.42.154; Domain=.navi66.com; Path=/; Expires=Sun, 31-Aug-2025 06:46:48 GMT\n__ddg1_=T05YwsnoEkkBLGBiYixs; Domain=.navi66.com; HttpOnly; Path=/; Expires=Mon, 31-Aug-2026 06:26:48 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\ncontent-type: font/woff\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:00:15 GMT\r\netag: W/\"a108-1959ed37c98\"\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":41224,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 41224, version 0.0","md5":"375cb9c3fcdad60c78fc841e118b300e","sha1":"c8e39f4dcd3cd3be9960d13dac01a271837d85fa","sha256":"1653c1f329d10a9edd664871183d0b09866c491eb15e3f4d759c0f403ff1fade","sha512":"8d77803d079e63f16bd789b4c08ae6b30e00bb629552fe8197d069b40d7c73165d22f00f8924392c400ef9a04036152983694ddf49be5b5b8f7fd19e2f446027","ssdeep":"768:HJh/zfum85Hk/dMext52XayC9wuVzIrD9QEZiFCPb1LmemJ5a:phrGm85Hk/dMeD5SC9wu2rhpZH4tW","tlshash":"c503f10280569b87da3f15f137989243b7b8e923dc44736c11583a1562a6c9bdbccef7","first_seen":"2025-03-25T21:21:04.787966Z","last_seen":"2026-05-03T18:40:44.91477Z","times_seen":24,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":65,"dns":0,"connect":26,"send":0,"wait":133,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi66.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/twgksPwM/bg-top-917f3ba6.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://steamconmuntiy.com/75417f002b5352","date":"2025-08-31T06:26:48.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:17:47 GMT","end":"Sun, 16 Nov 2025 07:17:46 GMT"},"fingerprint":{"sha1":"30:62:E2:16:F0:8D:8F:C4:30:EF:67:44:60:2F:45:29:D1:5B:AF:94","sha256":"EE:AB:93:C9:6B:44:94:94:F6:EE:CA:98:DE:CE:BF:A6:25:9F:C8:76:A5:43:59:77:38:DD:D2:23:F7:9C:B1:70"}}},"request":{"raw":"GET /twgksPwM/bg-top-917f3ba6.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 31 Aug 2025 06:26:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1139761\r\nlast-modified: Sat, 19 Apr 2025 20:22:19 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1139761,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1267 x 800, 8-bit/color RGBA, non-interlaced","md5":"4c934f29ebfa7a72e3c13a2d44561847","sha1":"c157efd7d44b3a96783375b1683e94d17fefddd3","sha256":"770813057cdb12beb924b32c0d75a570a4e0af91262a8f4b25d1aba1218fa2ac","sha512":"a6d9c5a0dacf60ffd879e164f15fcdd34c11e2b83500270b2d4f6b1eaf789e0f6e17a6715767a1d7e9ea1f8caa1436d174dbfee7495675a26630e2d37cd2719e","ssdeep":"24576:ueqcKv+7NIH13EuTMFuIQSbVNVG9n7dN4W7wfaPUdSnljSClj:ZOQEhLwfaPDhj","tlshash":"002533b8688059f81beb586d655638de35442164cbbcbed39c881f1580ff3ac4d4e3ae","first_seen":"2025-08-27T10:08:47.176292Z","last_seen":"2026-05-13T09:47:03.008722Z","times_seen":8,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}