{"report_id":"c08efce2-67f6-4c63-9b4d-9e4870c9dd30","version":0,"status":"done","tags":[],"date":"2026-07-20T13:04:15Z","url":{"schema":"https","addr":"6424172528.dojiner.at/","fqdn":"6424172528.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":0,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","fqdn":"6424172528.dojiner.at","domain":"dojiner.at","tld":"at"},"title":"Sign In","dom":{"size":13053,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11043)","md5":"362c19a641ec4e23005d248e7a41b11c","sha1":"a401afe76e5ca03cd9488c1c614452058779fb3b","sha256":"797eaddf005b277b269d06bb0a84238a657d2b87e2d92056b706dff8db98980d","sha512":"724a2dcfdcc8c60d067e328f5add480e93bd3fdf42aa1b369a078c60a4e382ecbe6c7007f467633f3dfce92cc926cd68a183ca2e53eb8eb12fa56be2838ac8e2","ssdeep":"384:OlhKAZCxqQXBoUS6vC3dF3RixhcKc7mtsk0ftQ0dh09l9u33rRiYd4ZfSNtIv5A:OlhZQxqQXBoUS6K3dF3RiYp7mtUa0dhP","tlshash":"8242ef368b1492677f8e0b916c29ad4c7ad2b6edc9c7840d5cb49fc38b83a7d9b110d4","dom_hash":"domhash18d05dadef3c1088acefbacce53a41ad","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"6424172528.dojiner.at/","fqdn":"6424172528.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":0,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-24T13:04:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"community.steamstatic.com","ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":243965,"first_seen":"2022-08-16T00:22:56Z","last_seen":"2026-07-17T05:19:20.550051Z","alert_count":0,"request_count":3,"received_data":8842,"sent_data":1571,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"6424172528.dojiner.at","ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":18,"request_count":6,"received_data":359542,"sent_data":5837,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-19T23:00:06.681739Z","alert_count":0,"request_count":2,"received_data":144851,"sent_data":958,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.cdnfonts.com","ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-03","domain_rank":50661,"first_seen":"2020-06-10T09:02:17Z","last_seen":"2026-07-16T15:11:02.656326Z","alert_count":0,"request_count":4,"received_data":150042,"sent_data":2250,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"community.akamai.steamstatic.com","ip":{"addr":"95.101.10.40","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-11-07","domain_rank":177446,"first_seen":"2021-01-05T18:54:34Z","last_seen":"2026-07-16T13:16:48.964915Z","alert_count":0,"request_count":3,"received_data":139872,"sent_data":1696,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"community.cloudflare.steamstatic.com","ip":{"addr":"95.101.11.114","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-11-07","domain_rank":246409,"first_seen":"2020-06-24T00:28:43Z","last_seen":"2026-07-11T04:30:18.179279Z","alert_count":0,"request_count":3,"received_data":995,"sent_data":1700,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"steamcommunity.com","ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2006-05-28","domain_rank":533,"first_seen":"2014-03-11T13:45:34Z","last_seen":"2026-07-19T00:07:43.791779Z","alert_count":0,"request_count":1,"received_data":38823,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"6424172528.dojiner.at/7d1a2b557c0700595900014119275d004e0e581b03.js","fqdn":"6424172528.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c098b8cea37eb49733457647f090c6ed","sha1":"650d240add0e30c90b43115e820c515b42564292","sha256":"e5ab71545e59e696d06e2a189c78a4199b3a424e0461b415c79293d635a9c7ee","sha512":"0d3e95ba99d8e1cc0ad638ec063b95b011f3a02eb6a13ed79a94d49148ba5a3086447dfc833e5385b1929c10375a4e05c114735541b20db8c354a766a78d5e8f","ssdeep":"6144:BUwOwCb8r8ZHHtWIiCtM9/sN6bfVBXHRbH0kZIaG9ITb6f1x5WAEMssz/3ue6/I0:BUwOdbo84Vffxk2XwEV+/3ue6/It+Tsk","tlshash":"f0647d45b230ea7e704a1a4274b73806b0395d79b191eccce73c5b5279f1b8e95332ae","size":327917,"data":"","first_seen":"2026-05-03T14:38:27.82305Z","last_seen":"2026-07-20T13:09:48.610128Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react@18.2.0/umd/react.production.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d86dcdbfed4c273c4742744941259902","sha1":"98089a33d0cf2fa4b3e1ba9b7eeb9b8ba0ac82a7","sha256":"4b4969fa4ef3594324da2c6d78ce8766fbbc2fd121fff395aedf997db0a99a06","sha512":"f10e98f579d36ce13e24dbe3050c09d87f12f94578b80ea1891ca485db48c83619d93a6b74d99639468a746cce872af8742ca4dbcece7a36cfbf097b96b7eaad","ssdeep":"96:DIxuZlZJFupWXpi0pGZBnXQd2q7s0ZiZmdUYe3egbwZqw8+mwoChzSBmqZTZ+Z33:kEXdMAFJdUTTE77tYHD4egFj2MFpKHc","tlshash":"6e22d5e4b952f0448a7338f1117f540f727eaea9b88c8d70a196d9d43db44ad9127f0e","size":10737,"data":"","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-07-21T21:37:49.104046Z","times_seen":16840,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react-dom@18.2.0/umd/react-dom.production.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64141792105ea4861f9f33294d65ab81","sha1":"506d9100caa070005a890bd496de64c437d6d008","sha256":"21758ed084cd0e37e735722ee4f3957ea960628a29dfa6c3ce1a1d47a2d6e4f7","sha512":"30e0a9aa84688ac093c09f2f41089c899bf4a9ca5138289d7a4dc64c54ba293936fb2ee6ba724894a09590509863ea7712b6055c28e61639df4d34520b538759","ssdeep":"1536:XtTqru1xouE1ZTnPrMiY6WRdA2qZpXnBnK3xsVdFE7zptEvp62kdS6F:JmuWl7ndK3xsVdKEd56F","tlshash":"ebd308e87996f6426ab202ab10ef1443737c992b784c4cb1e540fddd64b8069a17ff8d","size":131882,"data":"","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-07-21T21:37:49.10562Z","times_seen":16717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","fqdn":"6424172528.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-07-21T21:30:58.776475Z","times_seen":40454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","fqdn":"6424172528.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-07-21T21:04:53.033344Z","times_seen":42036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6424172528.dojiner.at/","fqdn":"6424172528.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbadd9c480859c98289b2b75d061a7d6","sha1":"3ce03e754a8e5c2abdf49626b6e4e679a3f94b49","sha256":"dc18dd26066a6c8b465f147e5ff7fcac850c7d0dc893b48bf6e9a8969f11b635","sha512":"5a179a5ed01cf5a3c1595c6a4cc6b74ee0a849ad5444989e6eb0137d3a35d489549fec77d28131e2d7f2f16b9a47f340b9131049cf5d37e1b2035d6f7be563a9","ssdeep":"","tlshash":"167000000282a020883c02208302a200aa800008000380a080e0020c200080b0080880","size":20,"data":"","first_seen":"2024-08-05T10:25:42Z","last_seen":"2026-07-21T19:01:36.488116Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6424172528.dojiner.at/","fqdn":"6424172528.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ec74946195056598ad72185cf237455","sha1":"eeba55aab6c8d20e5568ea7fd17ec14dd75796bf","sha256":"c932c7c42ffbd1963b9c5bf4ccba406d809b5c6ee776369e93602cc461056de1","sha512":"4af80ca39f7eb0ca6a0a820dd1c559491a6baee146b6149391171b2306952721a74dea01a10c7f8ffc37d6c5a6431be1a1e0a7b64a7bd057add3f1c85307172a","ssdeep":"","tlshash":"f4d012265bbe18700613a528031f7504267f914f10068d883b0c0b855f95b6550e06e4","size":219,"data":"","first_seen":"2026-07-20T13:02:38.643751Z","last_seen":"2026-07-20T13:09:48.623711Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Checkingmap[actor:server1.conn0.watcher17.process7//obj22 class:Window extensible:true frozen:false isError:false ownPropertyLength:936 preview:map[kind:ObjectWithURL url:https://6424172528.dojiner.at/] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj23 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[href:map[configurable:true enumerable:true value:https://6424172528.dojiner.at/ writable:true] isInternal:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://6424172528.dojiner.at/7d1a2b557c07005959000141.js","line_number":1,"column_number":238884},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj50 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[fbPixelInit:map[configurable:true enumerable:true value:false writable:true] linkData:map[configurable:true enumerable:true value:map[type:undefined] writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://6424172528.dojiner.at/7d1a2b557c0700595900014119275d004e0e581b03.js","line_number":21,"column_number":87892},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj51 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[needCheckConf:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://6424172528.dojiner.at/7d1a2b557c0700595900014119275d004e0e581b03.js","line_number":21,"column_number":9563},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj52 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[fbPixelInit:map[configurable:true enumerable:true value:false writable:true] linkData:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj53 class:Object extensible:true frozen:false isError:false ownPropertyLength:11 sealed:false type:object] writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://6424172528.dojiner.at/7d1a2b557c0700595900014119275d004e0e581b03.js","line_number":21,"column_number":87892}]},"http":[{"url":{"schema":"https","addr":"community.steamstatic.com/public/shared/images/header/logo_steam.svg","fqdn":"community.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","date":"2026-07-20T13:03:55.549Z","timestamp":1784552635549,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 06:33:09 GMT","end":"Tue, 22 Sep 2026 06:33:08 GMT"},"fingerprint":{"sha1":"19:6D:DC:98:BC:09:BE:D6:83:B1:DC:F5:FF:B7:3C:04:FD:C1:76:89","sha256":"35:83:44:F1:EF:BC:14:AB:36:88:58:F8:41:13:06:A6:4E:63:45:1B:0F:E0:E7:5C:BF:51:61:5F:54:3A:A6:C4"}}},"request":{"raw":"GET /public/shared/images/header/logo_steam.svg HTTP/1.1\r\nHost: community.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 09 Jul 2026 22:53:02 GMT\r\netag: \"6a50264e-e3f\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 23920\r\ndate: Mon, 20 Jul 2026 13:03:55 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270050-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1784552636.551395,VS0,VE1\r\ncontent-length: 3647\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3647,"size_decoded":4045,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aec9fa54ca7e28babd4c40859083ad34","sha1":"8a620d234a6cb2e9b3ba7e58b6349331e1cf9f5a","sha256":"19d0f67899a61b13d43ad1c810ba2d8d619b48ec00caba3b888fe6a285ce6cde","sha512":"4d72f59de3392b514750a83b0b04e3da2916eb6e5a3911b75ec6178f23aebfca3272379b02dc051201715d8bc23383d608c7e5c6ce758669c69ba657e17ac76c","ssdeep":"","tlshash":"e471b4cc17338be02996c27d1a7476d223b365adf8b001e8a3920c202c0afe69e64d75","first_seen":"2026-07-11T20:48:47.788479Z","last_seen":"2026-07-21T19:46:43.337073Z","times_seen":64,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6424172528.dojiner.at/7d1a2b557c07005959000141.js","fqdn":"6424172528.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6424172528.dojiner.at/","date":"2026-07-20T13:03:48.249Z","timestamp":1784552628249,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /7d1a2b557c07005959000141.js HTTP/1.1\r\nHost: 6424172528.dojiner.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.MPj-rWV6qzE38gGwqknsMy78dErDZpeH.2WB6ZCR0u7TBcv2F.lgPlao6ycU4s5TqmrvJBzJk6P53O4iRmhzOptMoUU2pGmfWCViVMNeAyvkdmTinQrHIh800MamXnHRTC-Vkw-aZBQrAe7nnV31IJSMCyMazUU97kYw7ACm8_lu_3eKjvOAg1l3oVHGCXHGkEk_OrO7LfQkaw03fIw5AnG48B0EcAt3uyiJ2PzjQwpAN9gnYXiYsMSPzBRRT0skeDdI85hQIq8kihos5lSUVhWdiPCGSSmCMq0gs2oRUZSPqaUg3y_bmykHaEsEZxQVmSSEpZjxWV.MHWTkBzinUsm26jN4B5YhQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTIwNywic2VjcmV0IjoiOWNlNDE2YzA3ZGQ5NGNlZDQ5OWM1NGIyOGRmNmU4MjMiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.2upUHXM0aEmNac8JRv-JvFAYeAxly6cpNlCaDdjbaD8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react@18.2.0/umd/react.production.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","date":"2026-07-20T13:03:48.698Z","timestamp":1784552628698,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/react@18.2.0/umd/react.production.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://6424172528.dojiner.at\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 20 Jul 2026 13:03:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 4382\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 18.2.0\r\nx-jsd-version-type: version\r\netag: W/\"29f1-mAiaM9DPL6Sz4bqbfuubi6Csgqc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220149-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3537022\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aD9ATMXgq7D%2BkHEIoqea4BY7rK343tx6rT0nNSo4NlWizxWwBte3UgRjkFRXJtdXMscjdXxjovufT%2BYeFC3STeCvK3Hixm73mraGP28ipl13x26xOy3%2FyFnO0koCITWW9pU%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a1e22b317e6575ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10737,"size_decoded":5497,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (630)","md5":"d86dcdbfed4c273c4742744941259902","sha1":"98089a33d0cf2fa4b3e1ba9b7eeb9b8ba0ac82a7","sha256":"4b4969fa4ef3594324da2c6d78ce8766fbbc2fd121fff395aedf997db0a99a06","sha512":"f10e98f579d36ce13e24dbe3050c09d87f12f94578b80ea1891ca485db48c83619d93a6b74d99639468a746cce872af8742ca4dbcece7a36cfbf097b96b7eaad","ssdeep":"96:DIxuZlZJFupWXpi0pGZBnXQd2q7s0ZiZmdUYe3egbwZqw8+mwoChzSBmqZTZ+Z33:kEXdMAFJdUTTE77tYHD4egFj2MFpKHc","tlshash":"6e22d5e4b952f0448a7338f1117f540f727eaea9b88c8d70a196d9d43db44ad9127f0e","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-07-21T21:37:49.104046Z","times_seen":16840,"resource_available":true,"data":null}},"time_used":6427,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":7,"receive":0,"ssl":6413},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/motiva-sans?styles=101373,102902,102901,103845","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","date":"2026-07-20T13:03:48.754Z","timestamp":1784552628754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 15:30:21 GMT","end":"Tue, 29 Sep 2026 16:27:50 GMT"},"fingerprint":{"sha1":"21:75:89:40:49:CB:1B:FB:A2:4F:1A:FF:87:01:DA:0D:73:C0:47:C2","sha256":"4C:2F:0D:D9:28:F8:B0:D6:C9:A7:88:BE:DA:96:4E:DE:5F:27:94:4F:DB:C9:69:5E:5C:E5:82:C6:6A:CA:A8:7B"}}},"request":{"raw":"GET /css/motiva-sans?styles=101373,102902,102901,103845 HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 13:03:48 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 1210297\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 06 Jul 2026 12:52:10 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GKVefBgfrzOB44w72msTOwe4EaFFrCiWv6N0wAOQneByFi2lnCuYv8E1FIWeXV7n5hJ1QJfWCSJckyCQ7ITfQuC002rZZ51x72EZ9aSvNmpW9nO3UVgPL7%2B2W%2FHNCcYgnE5Psi4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e22b09cc780b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":835,"size_decoded":908,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"f50ae0a6dc077a902b1ff78ad77cd89c","sha1":"1b25fa4f53b3c2cd927308fd4b8c54d25f8d11bb","sha256":"97e20f5c23acaf3c3334139a10003d96188e35e3d9d28ac231a7376ab163af03","sha512":"defe2f26f8f8f1b6df8429b6c283969ad316dde99e1b9f416a98e5d442d90fa69bc12544b71e4dd842d88d42bab04359523130fa9b175d2a28c393eb05a89d44","ssdeep":"","tlshash":"8b01a16125bfb55875340c8af35f35180d9b342b611dc625be792e448fba42d02b17ae","first_seen":"2024-11-20T13:09:05.413516Z","last_seen":"2026-07-20T13:09:48.610818Z","times_seen":62,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":6,"connect":11,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"95.101.10.40","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","date":"2026-07-20T13:03:55.180Z","timestamp":1784552635180,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/images/responsive/header_logo.png HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 10863\r\nLast-Modified: Fri, 22 Nov 2024 18:31:38 GMT\r\nETag: \"6740ce0a-2a6f\"\r\nAccept-Ranges: bytes\r\nDate: Mon, 20 Jul 2026 13:03:55 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10863,"size_decoded":11097,"mime_type":"image/png","magic":"PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced","md5":"a4e79c73ee13cb25b60fc4b0ba1f690c","sha1":"b690c31b2eb1b0eb085e91aaae7e79f03debe7c1","sha256":"6cb869df089146c12efb5e9c968e911c314842624ba6f052a11346ac734cadc8","sha512":"aad423119f410a655f0aa475d2fe692087d7262c3986ce71347981c5b60f6a10031d7050bf9b9aee4e7d84d814f0b8883c964028fcbe14ed3464602f3ba6cec3","ssdeep":"192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM","tlshash":"4722c06cfcc0c875958352ba3e27fb7043f93e10c44b86b86960e5a5365c8f4959d137","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-07-21T19:46:43.338694Z","times_seen":7462,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":91,"connect":2,"send":0,"wait":3,"receive":0,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.cloudflare.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1","fqdn":"community.cloudflare.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"95.101.11.114","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","date":"2026-07-20T13:03:55.183Z","timestamp":1784552635183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 12:23:39 GMT","end":"Mon, 05 Oct 2026 12:23:38 GMT"},"fingerprint":{"sha1":"0D:02:A7:E3:B4:38:2B:DD:DE:46:1F:F0:B6:42:DE:3C:4D:9D:C0:BC","sha256":"E3:45:F1:32:F6:F7:BC:A5:6F:A8:65:F2:0E:6A:3A:09:17:8E:E5:5C:5F:19:F3:FC:93:81:34:E3:D0:24:B3:FB"}}},"request":{"raw":"GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1\r\nHost: community.cloudflare.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://community.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1\r\ndate: Mon, 20 Jul 2026 13:03:55 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-grn: 0.3c772117.1784552635.1511b8d7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":95,"connect":1,"send":0,"wait":2,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"95.101.10.40","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","date":"2026-07-20T13:03:55.185Z","timestamp":1784552635185,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/images/joinsteam/new_login_bg_strong_mask.jpg HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/jpeg\r\nContent-Length: 124529\r\nLast-Modified: Fri, 22 Nov 2024 18:31:38 GMT\r\nETag: \"6740ce0a-1e671\"\r\nAccept-Ranges: bytes\r\nDate: Mon, 20 Jul 2026 13:03:55 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124529,"size_decoded":124766,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3","md5":"48b805d8fa321668db4ce8dfd96db5b9","sha1":"e0ded2606559c8100ef544c1f1c704e878a29b92","sha256":"9a75f8cc40bbe9c9499e7b2d3bab98a447685a361489357a111479517005c954","sha512":"95da761ca3f99f7808a0148cfa2416b8c03d90859bff65b396061ada5a4394fb50e2a4b82986caab07bc1fcd73980fe9b08e804b3ce897762a17d2e44935076d","ssdeep":"3072:R24zCBv0a8Oz/fxlnI0Nc49J7g3HOHQZP:R2GCea8OzHfjO85ygs","tlshash":"0bc3125bef39536bcc044b3328b74b000f79886a6c063d2a477155293a1a3b47df6a9f","first_seen":"2023-05-06T11:11:12Z","last_seen":"2026-07-21T19:46:43.297221Z","times_seen":904,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":86,"connect":2,"send":0,"wait":5,"receive":2,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/61286/MotivaSansRegular.woff.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","date":"2026-07-20T13:03:55.201Z","timestamp":1784552635201,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 15:30:21 GMT","end":"Tue, 29 Sep 2026 16:27:50 GMT"},"fingerprint":{"sha1":"21:75:89:40:49:CB:1B:FB:A2:4F:1A:FF:87:01:DA:0D:73:C0:47:C2","sha256":"4C:2F:0D:D9:28:F8:B0:D6:C9:A7:88:BE:DA:96:4E:DE:5F:27:94:4F:DB:C9:69:5E:5C:E5:82:C6:6A:CA:A8:7B"}}},"request":{"raw":"GET /s/61286/MotivaSansRegular.woff.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://6424172528.dojiner.at\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/css/motiva-sans?styles=101373,102902,102901,103845\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 20 Jul 2026 13:03:55 GMT\r\ncontent-type: font/woff\r\ncontent-length: 41424\r\nserver: cloudflare\r\nlast-modified: Sat, 05 Feb 2022 02:00:55 GMT\r\netag: \"a1d0-5d73bbcdc080a\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tX2gN8LHkbkPn6NZFyjeOUryBrrRJXPx7OtDhBAD4YoDx7aGESIeRChKQUyi4FGUMU%2Ff%2BHU3OgnHdT4eQdQIuBc2zejYsKwjVlLdqq0mPrI1D2RiEMdYXNcN8P81xUfLyiPj4lY%3D\"}]}\r\ncf-ray: a1e22b327d875690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41424,"size_decoded":42133,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 41424, version 0.0","md5":"57bd6f5c2a7c3c90763fbf2744699879","sha1":"27a5cafffebd1d150c6a6b3f7987045482c507c9","sha256":"a472df8bf74a611c4136f892221d4832010988461b4cd9d68058896f1f25a512","sha512":"a7647198a5902e16ea4272b4d7f435b4c7a7e2d9a3ce86d9fce8be790627a738eaa87011864637e8248a2eedc809a7fd73ab250b21a35c0ef6060525611c81fd","ssdeep":"768:K+F7LEi09DTJ0yWQeu29lsoKyaYopWadPez4bw7VQbywb4AIb3+wEL5i+:ZF6RGVQn2PKboadPU42Qb4AIb9Etj","tlshash":"d313f279c9f2d623e1fcde4423d94249c415520ba7a24bc03567f98f3bbe399e6a160c","first_seen":"2023-11-04T01:38:20Z","last_seen":"2026-07-20T13:09:48.611483Z","times_seen":128,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":229,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/61286/MotivaSansExtraBold.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","date":"2026-07-20T13:03:55.205Z","timestamp":1784552635205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 15:30:21 GMT","end":"Tue, 29 Sep 2026 16:27:50 GMT"},"fingerprint":{"sha1":"21:75:89:40:49:CB:1B:FB:A2:4F:1A:FF:87:01:DA:0D:73:C0:47:C2","sha256":"4C:2F:0D:D9:28:F8:B0:D6:C9:A7:88:BE:DA:96:4E:DE:5F:27:94:4F:DB:C9:69:5E:5C:E5:82:C6:6A:CA:A8:7B"}}},"request":{"raw":"GET /s/61286/MotivaSansExtraBold.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://6424172528.dojiner.at\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/css/motiva-sans?styles=101373,102902,102901,103845\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 20 Jul 2026 13:03:55 GMT\r\ncontent-type: font/woff\r\ncontent-length: 63628\r\nserver: cloudflare\r\nlast-modified: Sat, 05 Feb 2022 02:00:55 GMT\r\netag: \"f88c-5d73bbcdc080a\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=31tAKZmWSpzITqV4MHpNIS1aAplbQ%2FPcALJWERe8j%2BFIsQlVJ5QrALHVcHIUtAZzx%2Fwt%2FUMwvUMRyMkk9PuqBE9ZjFOmzxKSn2oURJ0SgmTxBY1FMDN6axJNJHvgt%2F%2BoBoWrIK4%3D\"}]}\r\ncf-ray: a1e22b332e295690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63628,"size_decoded":64345,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 63628, version 0.0","md5":"e704d909203f0e6a4ac8624c1e1b6536","sha1":"061607c6a57e63580fc7a46658763ff36cdd926d","sha256":"54b3bf2e12e41641dee7690b6e0eccf778d341713cb957aff9012f41d923cbe2","sha512":"c92aa2ac2ca0c75ebc5edd5008579692c120f05b33bbbce2f7f835b9cecddc3f1064647aa0543b93e17770422d4105227b32d0300d37b92e5a66610ec9fc8036","ssdeep":"1536:uacKl4quxZGi4XBHTXzU+9kZq7F1Tkd4wC5IryvbDz:rBl4qqGiO1TXYBI1YdCIryPz","tlshash":"b0530135d8e5e518b941937f20b19a33ba4e3080b51fc9e5124ce2c5af1ae7bb0bd489","first_seen":"2024-08-17T14:39:17Z","last_seen":"2026-07-20T13:09:48.618152Z","times_seen":72,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":182,"dns":0,"connect":0,"send":0,"wait":227,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6424172528.dojiner.at/7d1a2b557c0700514417014d474657225d575d064d1926737b361c732c01.css","fqdn":"6424172528.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","date":"2026-07-20T13:03:48.702Z","timestamp":1784552628702,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6424172528.dojiner.at","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 11:14:17 GMT","end":"Fri, 18 Sep 2026 11:14:16 GMT"},"fingerprint":{"sha1":"37:56:7C:80:3F:0E:A5:B1:CB:86:9F:C2:3F:E3:28:D3:72:76:C7:29","sha256":"35:BF:E6:2B:42:22:80:71:C3:2F:22:4C:88:A4:1A:A3:E0:A7:0F:54:1A:2E:0C:7F:C1:6A:9B:C8:88:16:29:68"}}},"request":{"raw":"GET /7d1a2b557c0700514417014d474657225d575d064d1926737b361c732c01.css HTTP/1.1\r\nHost: 6424172528.dojiner.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.MPj-rWV6qzE38gGwqknsMy78dErDZpeH.2WB6ZCR0u7TBcv2F.lgPlao6ycU4s5TqmrvJBzJk6P53O4iRmhzOptMoUU2pGmfWCViVMNeAyvkdmTinQrHIh800MamXnHRTC-Vkw-aZBQrAe7nnV31IJSMCyMazUU97kYw7ACm8_lu_3eKjvOAg1l3oVHGCXHGkEk_OrO7LfQkaw03fIw5AnG48B0EcAt3uyiJ2PzjQwpAN9gnYXiYsMSPzBRRT0skeDdI85hQIq8kihos5lSUVhWdiPCGSSmCMq0gs2oRUZSPqaUg3y_bmykHaEsEZxQVmSSEpZjxWV.MHWTkBzinUsm26jN4B5YhQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTIwNywic2VjcmV0IjoiOWNlNDE2YzA3ZGQ5NGNlZDQ5OWM1NGIyOGRmNmU4MjMiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.2upUHXM0aEmNac8JRv-JvFAYeAxly6cpNlCaDdjbaD8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Mon, 20 Jul 2026 13:03:48 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\ncontent-disposition: inline\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nlast-modified: Fri, 19 Jun 2026 22:37:50 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24830,"size_decoded":6928,"mime_type":"text/css","magic":"ASCII text, with very long lines (24829)","md5":"6d85d611f609ae2030ac157ec5f5f07f","sha1":"13337042e8fd252d2c0074e36622085559a126e6","sha256":"583e3e859643c1c9fffb20286c12a1df80ac6a470cfb5d195f56013d9447e4e7","sha512":"b22c9362c3e26d19b9f14f8099d807bbad20e9181acb81b094b8e65437b2a75ee79b51d6a32f24783289751a4bfb0d656f46525511e5906afaf1aa8973ce2369","ssdeep":"768:+lMQqMdSi0vqDrXKtTrCdwahYX87/yne5L8:2xSPqDmtTrCdwahYX87/ynr","tlshash":"b5b2963297613239711b8a253cc2a9859031bc4695ffdabdfa711c2f86490930fe72f6","first_seen":"2025-08-24T16:19:12.380926Z","last_seen":"2026-07-20T13:09:48.615773Z","times_seen":53,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6424172528.dojiner.at/7d1a2b557c07004343010554115123125d4a5017","fqdn":"6424172528.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","date":"2026-07-20T13:03:55.228Z","timestamp":1784552635228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6424172528.dojiner.at","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 11:14:17 GMT","end":"Fri, 18 Sep 2026 11:14:16 GMT"},"fingerprint":{"sha1":"37:56:7C:80:3F:0E:A5:B1:CB:86:9F:C2:3F:E3:28:D3:72:76:C7:29","sha256":"35:BF:E6:2B:42:22:80:71:C3:2F:22:4C:88:A4:1A:A3:E0:A7:0F:54:1A:2E:0C:7F:C1:6A:9B:C8:88:16:29:68"}}},"request":{"raw":"POST /7d1a2b557c07004343010554115123125d4a5017 HTTP/1.1\r\nHost: 6424172528.dojiner.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 14\r\nOrigin: https://6424172528.dojiner.at\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.MPj-rWV6qzE38gGwqknsMy78dErDZpeH.2WB6ZCR0u7TBcv2F.lgPlao6ycU4s5TqmrvJBzJk6P53O4iRmhzOptMoUU2pGmfWCViVMNeAyvkdmTinQrHIh800MamXnHRTC-Vkw-aZBQrAe7nnV31IJSMCyMazUU97kYw7ACm8_lu_3eKjvOAg1l3oVHGCXHGkEk_OrO7LfQkaw03fIw5AnG48B0EcAt3uyiJ2PzjQwpAN9gnYXiYsMSPzBRRT0skeDdI85hQIq8kihos5lSUVhWdiPCGSSmCMq0gs2oRUZSPqaUg3y_bmykHaEsEZxQVmSSEpZjxWV.MHWTkBzinUsm26jN4B5YhQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTIwNywic2VjcmV0IjoiOWNlNDE2YzA3ZGQ5NGNlZDQ5OWM1NGIyOGRmNmU4MjMiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.2upUHXM0aEmNac8JRv-JvFAYeAxly6cpNlCaDdjbaD8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"{\"visit\":null}"}},"response":{"raw":"HTTP/2 201 \r\nserver: openresty\r\ndate: Mon, 20 Jul 2026 13:03:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 253\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"fd-yA16tyDp9g0TCNTmD7L1N44gyvs\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":253,"size_decoded":881,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"042639cbd89a011bdf7bda52f28cd9f1","sha1":"c80d7ab720e9f60d1308d4e60fb2f5378e20cafb","sha256":"4846aae4e7b7ed71f00fccb9d3abde7d873d6cbc052f8dc88f41cd1cb5dde726","sha512":"7605d777d0ba6cbfdc2a61d8e56a3a5af5dcb613a5dd282aa8a2d171f885d13514feef5272a0f81c9d5ed39cd619bbcc46bfc4f73db43865afb4bc40a16261ba","ssdeep":"","tlshash":"c7d05e8d229816be4542858ad8ae0a1a13001992707cbc5cf05d060278e31d3c4f0e0b","first_seen":"2025-12-21T13:36:47.439788Z","last_seen":"2026-07-20T13:09:48.618728Z","times_seen":17,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6424172528.dojiner.at/","fqdn":"6424172528.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-20T13:03:47.903Z","timestamp":1784552627903,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6424172528.dojiner.at","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 11:14:17 GMT","end":"Fri, 18 Sep 2026 11:14:16 GMT"},"fingerprint":{"sha1":"37:56:7C:80:3F:0E:A5:B1:CB:86:9F:C2:3F:E3:28:D3:72:76:C7:29","sha256":"35:BF:E6:2B:42:22:80:71:C3:2F:22:4C:88:A4:1A:A3:E0:A7:0F:54:1A:2E:0C:7F:C1:6A:9B:C8:88:16:29:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6424172528.dojiner.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Mon, 20 Jul 2026 13:03:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 441\r\ncache-control: public, max-age=60, s-maxage=60, stale-while-revalidate=30\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"1b9-J/BMyW3tEF6aJwZYx4zI3vnrDck\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nset-cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.MPj-rWV6qzE38gGwqknsMy78dErDZpeH.2WB6ZCR0u7TBcv2F.lgPlao6ycU4s5TqmrvJBzJk6P53O4iRmhzOptMoUU2pGmfWCViVMNeAyvkdmTinQrHIh800MamXnHRTC-Vkw-aZBQrAe7nnV31IJSMCyMazUU97kYw7ACm8_lu_3eKjvOAg1l3oVHGCXHGkEk_OrO7LfQkaw03fIw5AnG48B0EcAt3uyiJ2PzjQwpAN9gnYXiYsMSPzBRRT0skeDdI85hQIq8kihos5lSUVhWdiPCGSSmCMq0gs2oRUZSPqaUg3y_bmykHaEsEZxQVmSSEpZjxWV.MHWTkBzinUsm26jN4B5YhQ; Max-Age=21600; Path=/; Expires=Mon, 20 Jul 2026 19:03:48 GMT; SameSite=Lax\ntoken=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTIwNywic2VjcmV0IjoiOWNlNDE2YzA3ZGQ5NGNlZDQ5OWM1NGIyOGRmNmU4MjMiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.2upUHXM0aEmNac8JRv-JvFAYeAxly6cpNlCaDdjbaD8; Max-Age=21600; Path=/; Expires=Mon, 20 Jul 2026 19:03:48 GMT; SameSite=Lax\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":441,"size_decoded":1883,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"56d058d324d5feb3b163bc43c629b00f","sha1":"27f04cc96ded105e9a270658c78cc8def9eb0dc9","sha256":"3762e405dce9d46a7f3b2ba4b3a09b2850600a3868395975ce5b75e74e358a15","sha512":"e289fb2fce0e1332f6d36c5ef7f2f6517fa9dc907ff43910f1e8e6de49bb6ab3f6377bc233dc59e2dfd27fd7cf829cb82a4b68fe7a6d76292bd54d4ae7c01748","ssdeep":"","tlshash":"bdf022994fbba4301a737a140faeb10c1baf916b2406cd553bcc1a881f91ba58c92ad0","first_seen":"2026-07-20T13:04:20.206809Z","last_seen":"2026-07-20T13:04:20.206809Z","times_seen":1,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":9,"connect":29,"send":0,"wait":47,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","fqdn":"6424172528.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-20T13:03:48.457Z","timestamp":1784552628457,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6424172528.dojiner.at","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 11:14:17 GMT","end":"Fri, 18 Sep 2026 11:14:16 GMT"},"fingerprint":{"sha1":"37:56:7C:80:3F:0E:A5:B1:CB:86:9F:C2:3F:E3:28:D3:72:76:C7:29","sha256":"35:BF:E6:2B:42:22:80:71:C3:2F:22:4C:88:A4:1A:A3:E0:A7:0F:54:1A:2E:0C:7F:C1:6A:9B:C8:88:16:29:68"}}},"request":{"raw":"GET /7d1a2b557c070056560f01755b040c0a64585e06 HTTP/1.1\r\nHost: 6424172528.dojiner.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.MPj-rWV6qzE38gGwqknsMy78dErDZpeH.2WB6ZCR0u7TBcv2F.lgPlao6ycU4s5TqmrvJBzJk6P53O4iRmhzOptMoUU2pGmfWCViVMNeAyvkdmTinQrHIh800MamXnHRTC-Vkw-aZBQrAe7nnV31IJSMCyMazUU97kYw7ACm8_lu_3eKjvOAg1l3oVHGCXHGkEk_OrO7LfQkaw03fIw5AnG48B0EcAt3uyiJ2PzjQwpAN9gnYXiYsMSPzBRRT0skeDdI85hQIq8kihos5lSUVhWdiPCGSSmCMq0gs2oRUZSPqaUg3y_bmykHaEsEZxQVmSSEpZjxWV.MHWTkBzinUsm26jN4B5YhQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTIwNywic2VjcmV0IjoiOWNlNDE2YzA3ZGQ5NGNlZDQ5OWM1NGIyOGRmNmU4MjMiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.2upUHXM0aEmNac8JRv-JvFAYeAxly6cpNlCaDdjbaD8\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Mon, 20 Jul 2026 13:03:48 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-disposition: inline\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nlast-modified: Fri, 19 Jun 2026 22:37:50 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2024,"size_decoded":1650,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (433)","md5":"04f01c167346c1e6f27a01dbc0a63454","sha1":"9c9fbfcf29e29016a56889deb7d0a752cc8d068e","sha256":"7d2adc279ceada19554661e446c550c8aa5498917046c9215f9d9287057ee0bb","sha512":"eba49213f5e682002672871398c8ee34bd7d8b6eedf447db00db12ac425c142a7c987e35f010f469e5b7bcd602cecb26b82fbf5a76fa76cd048652db1d3d4b55","ssdeep":"","tlshash":"91416747feb8c4b51a540e5fbc36f50c78e25a158a9da8c005ef90e5a821f964e66c88","first_seen":"2026-07-20T13:04:20.2094Z","last_seen":"2026-07-20T13:04:20.2094Z","times_seen":1,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react-dom@18.2.0/umd/react-dom.production.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","date":"2026-07-20T13:03:48.700Z","timestamp":1784552628700,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/react-dom@18.2.0/umd/react-dom.production.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://6424172528.dojiner.at\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 20 Jul 2026 13:03:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 43516\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 18.2.0\r\nx-jsd-version-type: version\r\netag: W/\"2032a-UG2RAMqgcABaiQvUlt5kxDfW0Ag\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220089-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3483092\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SmnYzOVl5KOgvETzaUuaIcqk7KJgwmmd5Tc0fblGukkyPegtdWWzceqsdTz3NCX4PyaW8DUfUfHXtleura7u9FQ91A6QidKK%2BRXkgpfyUacLlM0SAwNHi0U5%2FfTrML%2BMexk%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a1e22b0abcdf75ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131882,"size_decoded":44633,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (945)","md5":"64141792105ea4861f9f33294d65ab81","sha1":"506d9100caa070005a890bd496de64c437d6d008","sha256":"21758ed084cd0e37e735722ee4f3957ea960628a29dfa6c3ce1a1d47a2d6e4f7","sha512":"30e0a9aa84688ac093c09f2f41089c899bf4a9ca5138289d7a4dc64c54ba293936fb2ee6ba724894a09590509863ea7712b6055c28e61639df4d34520b538759","ssdeep":"1536:XtTqru1xouE1ZTnPrMiY6WRdA2qZpXnBnK3xsVdFE7zptEvp62kdS6F:JmuWl7ndK3xsVdKEd56F","tlshash":"ebd308e87996f6426ab202ab10ef1443737c992b784c4cb1e540fddd64b8069a17ff8d","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-07-21T21:37:49.10562Z","times_seen":16717,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":10,"receive":1,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg","fqdn":"community.cloudflare.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"95.101.11.114","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","date":"2026-07-20T13:03:55.178Z","timestamp":1784552635178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 12:23:39 GMT","end":"Mon, 05 Oct 2026 12:23:38 GMT"},"fingerprint":{"sha1":"0D:02:A7:E3:B4:38:2B:DD:DE:46:1F:F0:B6:42:DE:3C:4D:9D:C0:BC","sha256":"E3:45:F1:32:F6:F7:BC:A5:6F:A8:65:F2:0E:6A:3A:09:17:8E:E5:5C:5F:19:F3:FC:93:81:34:E3:D0:24:B3:FB"}}},"request":{"raw":"GET /public/shared/images/header/logo_steam.svg HTTP/1.1\r\nHost: community.cloudflare.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: nginx\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://community.steamstatic.com/public/shared/images/header/logo_steam.svg\r\ndate: Mon, 20 Jul 2026 13:03:55 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\nakamai-grn: 0.6e0b655f.1784552635.12fc56f0\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":100,"connect":1,"send":0,"wait":30,"receive":0,"ssl":225},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"95.101.10.40","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","date":"2026-07-20T13:03:55.179Z","timestamp":1784552635179,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 3777\r\nLast-Modified: Fri, 05 Jan 2018 01:35:16 GMT\r\nETag: \"5a4ed654-ec1\"\r\nAccept-Ranges: bytes\r\nDate: Mon, 20 Jul 2026 13:03:55 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3777,"size_decoded":4009,"mime_type":"image/png","magic":"PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced","md5":"eabc76eb57feae44add7faead028521e","sha1":"4e3e53938fad15661d2d046a868338841a95db19","sha256":"fc9e6260a2706ae146282d77e67bc1b74688435f8912ab4c1932641eec28bffa","sha512":"5c6da6eeefddf321c2bc7e39a134e0a3140a9f93ad1560b2e102ef60ec218c29aae14ed344c79e25cc5493cd15551040d8c909de28dcab02034d787563104e07","ssdeep":"","tlshash":"eb717ce7323e5456e1f056c6015b52f69eb1a1080d2b4e09f224b77831ac63be38333d","first_seen":"2023-04-05T21:31:08Z","last_seen":"2026-07-21T19:46:43.307936Z","times_seen":7491,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":91,"connect":3,"send":0,"wait":3,"receive":0,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1","fqdn":"community.cloudflare.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"95.101.11.114","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","date":"2026-07-20T13:03:55.181Z","timestamp":1784552635181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 12:23:39 GMT","end":"Mon, 05 Oct 2026 12:23:38 GMT"},"fingerprint":{"sha1":"0D:02:A7:E3:B4:38:2B:DD:DE:46:1F:F0:B6:42:DE:3C:4D:9D:C0:BC","sha256":"E3:45:F1:32:F6:F7:BC:A5:6F:A8:65:F2:0E:6A:3A:09:17:8E:E5:5C:5F:19:F3:FC:93:81:34:E3:D0:24:B3:FB"}}},"request":{"raw":"GET /public/images/skin_1/footerLogo_valve.png?v=1 HTTP/1.1\r\nHost: community.cloudflare.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: nginx\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://community.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1\r\ndate: Mon, 20 Jul 2026 13:03:55 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\nakamai-grn: 0.6e0b655f.1784552635.12fc56ef\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T21:24:28.772204Z","times_seen":17431926,"resource_available":true,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":97,"connect":1,"send":0,"wait":30,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/61286/MotivaSansMedium.woff.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","date":"2026-07-20T13:03:55.203Z","timestamp":1784552635203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 15:30:21 GMT","end":"Tue, 29 Sep 2026 16:27:50 GMT"},"fingerprint":{"sha1":"21:75:89:40:49:CB:1B:FB:A2:4F:1A:FF:87:01:DA:0D:73:C0:47:C2","sha256":"4C:2F:0D:D9:28:F8:B0:D6:C9:A7:88:BE:DA:96:4E:DE:5F:27:94:4F:DB:C9:69:5E:5C:E5:82:C6:6A:CA:A8:7B"}}},"request":{"raw":"GET /s/61286/MotivaSansMedium.woff.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://6424172528.dojiner.at\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/css/motiva-sans?styles=101373,102902,102901,103845\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 20 Jul 2026 13:03:55 GMT\r\ncontent-type: font/woff\r\ncontent-length: 41284\r\nserver: cloudflare\r\nlast-modified: Sat, 05 Feb 2022 02:00:55 GMT\r\netag: \"a144-5d73bbcdc080a\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8c1AEYgmQS6gz0Ys%2F%2Bppzrm4zJpukenvrcXmWLhOssxZRQ4nybV2WsmD3UbDHGwcYGD%2F7sSg5mGFZjBtbOL0ZshVuggu3RlWDEkSh0SbUuLUGr44Hr%2FWmydD4jCJYM1B2qigtb0%3D\"}]}\r\ncf-ray: a1e22b332e275690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41284,"size_decoded":41997,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 41284, version 0.0","md5":"6a3575348afb953addea554183438636","sha1":"bb136d68b07e69ab4272d098f522e2c740b668a7","sha256":"dee2f7d9132cbdf82ac50b78835902a6000d29876f467f43bc0a8df21bfd9dbd","sha512":"4401b4814cf15b10e832e64fff3431a36bcc5a244b1f723556e6cdc5bfbd93beb5b40365b2ee26bba1930dc4e4751282f16b483a653c3b5a6c35c98748da3670","ssdeep":"768:6bvd2M/P1Exmz4SXIT1d0QDS/LH400ZT9O1HCL8TXAo3+woBHIL:6bvXSw4wIF+/F0ZT9OI2X9oBoL","tlshash":"9d03f13bad025e9ae9f9b183937a07e54a12c11f31c2d7b4a227c87c6edc705ca9154e","first_seen":"2023-11-04T01:38:20Z","last_seen":"2026-07-20T13:09:48.615186Z","times_seen":125,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":181,"dns":0,"connect":0,"send":0,"wait":229,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1","fqdn":"community.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","date":"2026-07-20T13:03:55.336Z","timestamp":1784552635336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 06:33:09 GMT","end":"Tue, 22 Sep 2026 06:33:08 GMT"},"fingerprint":{"sha1":"19:6D:DC:98:BC:09:BE:D6:83:B1:DC:F5:FF:B7:3C:04:FD:C1:76:89","sha256":"35:83:44:F1:EF:BC:14:AB:36:88:58:F8:41:13:06:A6:4E:63:45:1B:0F:E0:E7:5C:BF:51:61:5F:54:3A:A6:C4"}}},"request":{"raw":"GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1\r\nHost: community.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-123\"\r\naccept-ranges: bytes\r\ndate: Mon, 20 Jul 2026 13:03:55 GMT\r\nvia: 1.1 varnish\r\nage: 2916\r\nx-served-by: cache-bma-essb1270050-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 67859\r\nx-timer: S1784552635.413461,VS0,VE0\r\ncontent-length: 291\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":291,"size_decoded":661,"mime_type":"image/png","magic":"PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced","md5":"a2796187c58c7e948159e37d6990ecc2","sha1":"4209cd85add507247f9ce5a87a8c9095b54ee417","sha256":"23341256db7f44b1f3811880fa2bae6b7748bbf6b62c544a162e38cf0d5c5082","sha512":"5ef103b8398507495c2708df8fcd82bdb763b1d580aaaa6cacfb805614764277c19e8ece5d890a8aafc004fc8c25e3ab2e67d6fbf373c432a9a0d7c36fa0890f","ssdeep":"","tlshash":"83d0ebf3a3e86d79fb52fe97d10180e0465fcaeb6004877889c3880447a81f880f2996","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-07-21T19:46:43.330989Z","times_seen":7425,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":49,"dns":2,"connect":9,"send":0,"wait":9,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6424172528.dojiner.at/7d1a2b557c0700595900014119275d004e0e581b03.js","fqdn":"6424172528.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","date":"2026-07-20T13:03:48.701Z","timestamp":1784552628701,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6424172528.dojiner.at","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 11:14:17 GMT","end":"Fri, 18 Sep 2026 11:14:16 GMT"},"fingerprint":{"sha1":"37:56:7C:80:3F:0E:A5:B1:CB:86:9F:C2:3F:E3:28:D3:72:76:C7:29","sha256":"35:BF:E6:2B:42:22:80:71:C3:2F:22:4C:88:A4:1A:A3:E0:A7:0F:54:1A:2E:0C:7F:C1:6A:9B:C8:88:16:29:68"}}},"request":{"raw":"GET /7d1a2b557c0700595900014119275d004e0e581b03.js HTTP/1.1\r\nHost: 6424172528.dojiner.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.MPj-rWV6qzE38gGwqknsMy78dErDZpeH.2WB6ZCR0u7TBcv2F.lgPlao6ycU4s5TqmrvJBzJk6P53O4iRmhzOptMoUU2pGmfWCViVMNeAyvkdmTinQrHIh800MamXnHRTC-Vkw-aZBQrAe7nnV31IJSMCyMazUU97kYw7ACm8_lu_3eKjvOAg1l3oVHGCXHGkEk_OrO7LfQkaw03fIw5AnG48B0EcAt3uyiJ2PzjQwpAN9gnYXiYsMSPzBRRT0skeDdI85hQIq8kihos5lSUVhWdiPCGSSmCMq0gs2oRUZSPqaUg3y_bmykHaEsEZxQVmSSEpZjxWV.MHWTkBzinUsm26jN4B5YhQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTIwNywic2VjcmV0IjoiOWNlNDE2YzA3ZGQ5NGNlZDQ5OWM1NGIyOGRmNmU4MjMiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.2upUHXM0aEmNac8JRv-JvFAYeAxly6cpNlCaDdjbaD8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Mon, 20 Jul 2026 13:03:48 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncontent-disposition: inline\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nlast-modified: Fri, 19 Jun 2026 22:37:50 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":327917,"size_decoded":108785,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64178)","md5":"c098b8cea37eb49733457647f090c6ed","sha1":"650d240add0e30c90b43115e820c515b42564292","sha256":"e5ab71545e59e696d06e2a189c78a4199b3a424e0461b415c79293d635a9c7ee","sha512":"0d3e95ba99d8e1cc0ad638ec063b95b011f3a02eb6a13ed79a94d49148ba5a3086447dfc833e5385b1929c10375a4e05c114735541b20db8c354a766a78d5e8f","ssdeep":"6144:BUwOwCb8r8ZHHtWIiCtM9/sN6bfVBXHRbH0kZIaG9ITb6f1x5WAEMssz/3ue6/I0:BUwOdbo84Vffxk2XwEV+/3ue6/It+Tsk","tlshash":"f0647d45b230ea7e704a1a4274b73806b0395d79b191eccce73c5b5279f1b8e95332ae","first_seen":"2026-05-03T14:38:27.82305Z","last_seen":"2026-07-20T13:09:48.610128Z","times_seen":22,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6424172528.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"steamcommunity.com/favicon.ico","fqdn":"steamcommunity.com","domain":"steamcommunity.com","tld":"com"},"ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","date":"2026-07-20T13:03:50.140Z","timestamp":1784552630140,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steampowered.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:66:D7:D2:99:D6:A1:56:A5:A6:D9:94:5C:88:56:DD:5C:41:8E:49","sha256":"C5:81:A7:0E:F1:39:43:B6:7A:5C:E3:67:B5:C9:6C:8C:D4:AD:B1:96:E3:F0:6B:88:9F:83:D4:2D:94:97:36:7C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: steamcommunity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/x-icon\r\nCache-Control: public,max-age=86400\r\nExpires: Mon, 20 Jul 2026 05:32:30 GMT\r\nLast-Modified: Fri, 22 Nov 2024 18:31:38 GMT\r\nContent-Length: 38554\r\nDate: Mon, 20 Jul 2026 13:03:55 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38554,"size_decoded":38823,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"231913fdebabcbe65f4b0052372bde56","sha1":"553909d080e4f210b64dc73292f3a111d5a0781f","sha256":"9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad","sha512":"7b11b709968c5a52b9b60189fb534f5df56912417243820e9d1c00c97f4bd6d0835f2cdf574d0c36ecb32dbbf5fc397324df54f7fdf9e1b062b5dbda2c02e919","ssdeep":"768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh","tlshash":"70038de82e4917aee9e2cf324adb6716237b4f88c0bc169742b07f193175a51c6d78c1","first_seen":"2023-04-05T07:02:49Z","last_seen":"2026-07-21T19:46:43.341831Z","times_seen":6805,"resource_available":false,"data":null}},"time_used":5006,"timings":{"blocked":4978,"dns":0,"connect":1,"send":0,"wait":14,"receive":1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1","fqdn":"community.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6424172528.dojiner.at/7d1a2b557c070056560f01755b040c0a64585e06","date":"2026-07-20T13:03:55.547Z","timestamp":1784552635547,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 06:33:09 GMT","end":"Tue, 22 Sep 2026 06:33:08 GMT"},"fingerprint":{"sha1":"19:6D:DC:98:BC:09:BE:D6:83:B1:DC:F5:FF:B7:3C:04:FD:C1:76:89","sha256":"35:83:44:F1:EF:BC:14:AB:36:88:58:F8:41:13:06:A6:4E:63:45:1B:0F:E0:E7:5C:BF:51:61:5F:54:3A:A6:C4"}}},"request":{"raw":"GET /public/images/skin_1/footerLogo_valve.png?v=1 HTTP/1.1\r\nHost: community.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-e99\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 20 Jul 2026 13:03:55 GMT\r\nvia: 1.1 varnish\r\nage: 3573\r\nx-served-by: cache-bma-essb1270050-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1\r\nx-timer: S1784552636.549418,VS0,VE2\r\ncontent-length: 3737\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3737,"size_decoded":4136,"mime_type":"image/png","magic":"PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced","md5":"1626f52addb7c56fe3679d82108c62e9","sha1":"2b414092d66ecff528950093a655f755c3c7f3b5","sha256":"ae9f6c61e25d15882bf57bde193d10d375bd315c9741cabda11d700fd1bb7dd1","sha512":"05548831477cc421556c404f3411f581e98a84ff2e699882cb4f5dca17d1c5f77b55ed2b8211eec32d0a4317be1c4ebc636277f840262491b753415f6f198276","ssdeep":"","tlshash":"0e718e669660b49e18cd70910dce2581eb543268c5673b3865d236cea8a1d179f2d071","first_seen":"2023-04-16T19:19:52Z","last_seen":"2026-07-21T06:21:09.766381Z","times_seen":3312,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}