{"report_id":"e65e8448-3788-4aeb-8771-c723047b6fea","version":6,"status":"done","tags":[],"date":"2025-12-11T03:09:47Z","url":{"schema":"http","addr":"winter-gift.cfd/id=5947221648/","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"172.67.207.179","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"winter-gift.cfd/id=5947221648/","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"title":"Steam Gift Activation","dom":{"size":38341,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3584)","md5":"2be6f2332cc77b78b1d2c2b5f8c9236a","sha1":"273d53d612c16556258f55c8c3eb36e8a04cb491","sha256":"ea80c158d06eb25936f5bdba22d00df1c393dcea329b69e40e65f6a4786e43c2","sha512":"a77614bdfe5e7fc6ed31b91186165783f7f1ea552193bcf765618311496f18f4a08449dc9af8d99133145e36c2c769dad7b762eca71053cb7eb4b8afd23e9145","ssdeep":"768:IPR4Otk+vD65IXEBueQLB5RnsRP8SZ343p82lfxabUjVcsHjZPIZKCCxtfCG05+q:IPR4Otk+vD65IXEBueQLB5m8S343pdAP","tlshash":"40036421a8f3c03b459ab1d5b1a79b3e6653cb4bd5448f9477ec02a4efd6bd24a2301c","dom_hash":"domhash27ae954dbe7b30c8d182708c9fce89b5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"winter-gift.cfd/id=5947221648/","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"172.67.207.179","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-15T03:09:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2025-12-11","alert":"Hunting_JS_WebAssembly","trigger":"store.fastly.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=vNpZeOuePA4R\u0026l=english\u0026_cdn=fastly","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-11","alert":"Sinkholed","trigger":"winter-gift.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"code.jquery.com","ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-12-07T22:25:33.399392Z","alert_count":0,"request_count":1,"received_data":470425,"sent_data":391,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"recaptcha.net","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-01-06","domain_rank":1074,"first_seen":"2012-07-15T20:16:42Z","last_seen":"2025-12-08T20:36:01.744307Z","alert_count":0,"request_count":1,"received_data":1808,"sent_data":406,"comment":"","tags":null,"fingerprints":null},{"fqdn":"imgur.com","ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":695,"first_seen":"2012-10-04T02:07:24Z","last_seen":"2025-12-04T13:22:36.924885Z","alert_count":0,"request_count":1,"received_data":1040720,"sent_data":395,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"winter-gift.cfd","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-08","domain_rank":0,"first_seen":"2025-12-11T03:09:51.981054Z","last_seen":"2025-12-11T03:09:51.981054Z","alert_count":6,"request_count":6,"received_data":303961,"sent_data":5657,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery UI:1.11.3","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Prototype:1.7","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"script.aculo.us","description":"","website":"https://script.aculo.us","common_platform_enumeration":"","icon":"script.aculo.us.png","categories":["JavaScript libraries"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-07T22:19:32.033314Z","alert_count":0,"request_count":1,"received_data":89178,"sent_data":410,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2025-12-08T06:46:16.982799Z","alert_count":0,"request_count":1,"received_data":1040975,"sent_data":397,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"api.steampowered.com","ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2000-08-09","domain_rank":25571,"first_seen":"2015-12-16T22:18:52Z","last_seen":"2025-11-30T14:49:16.511439Z","alert_count":0,"request_count":1,"received_data":212,"sent_data":599,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.cloudflare.steamstatic.com","ip":{"addr":"23.36.77.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-11-07","domain_rank":239946,"first_seen":"2020-06-12T06:10:44Z","last_seen":"2025-12-09T18:27:51.571628Z","alert_count":0,"request_count":1,"received_data":2849,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"steamcommunity.com","ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2006-05-28","domain_rank":533,"first_seen":"2014-03-11T13:45:34Z","last_seen":"2025-12-04T04:53:24.7122Z","alert_count":0,"request_count":1,"received_data":38823,"sent_data":404,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-12-07T22:22:10.335339Z","alert_count":0,"request_count":1,"received_data":848466,"sent_data":459,"comment":"","tags":null,"fingerprints":null},{"fqdn":"store.fastly.steamstatic.com","ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":81796,"first_seen":"2024-10-31T18:26:40Z","last_seen":"2025-12-09T16:51:14.689818Z","alert_count":1,"request_count":45,"received_data":4623875,"sent_data":21230,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.akamai.steamstatic.com","ip":{"addr":"23.36.77.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-11-07","domain_rank":129555,"first_seen":"2014-04-02T16:39:27Z","last_seen":"2025-12-07T19:00:56.899112Z","alert_count":0,"request_count":1,"received_data":503638,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/main.js?v=wiAgKBaqWusf\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"201af6d660f6dc12127817032854ddee","sha1":"784fe662c662941b2276c61df95d33bbc9a533ca","sha256":"1c1fb15238a029728128f9a4adc3b6126a4bc36578134abb658865d891ed6657","sha512":"ab63549870b419e04fc1173c513ac03210be0639fe5d7f46206fc84c8c863e39bdfc06b50af187d17aae9e7b98e7b0a941d136c62b42d2ded5c600fa89f7ae76","ssdeep":"1536:UqB6CKMhEnSF7D5dr+DUfMpauSa4ZRxwyWLWxLm46mAPeLcbGMS7ydSxkFXBwWP1:bBuqZn+6m","tlshash":"d783f7d4f79d01399479203cad1f90897a7e4871b900a8627d4e8aac75d092f43bbf7e","size":86323,"data":"","first_seen":"2025-09-03T01:33:28.311265Z","last_seen":"2026-01-28T11:44:53.28512Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=tvQi85mXnRZH\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"70e3e4b83440b26bb2eaa98e48d334ea","sha1":"081d5c91afa9143e52f826bcdcdb818c45a30268","sha256":"90b6c0471116539c1c99bc77b8152872984e3f3cba97c53b8566efbd483a299b","sha512":"5ca47d2be70514e43753713ef737a61752ec142ea628596bcc5a0bf6514c4aae57614c584d15c830d0a1f47cb0cc70b550f10c524173e6e1f9a41d1a2a74018c","ssdeep":"384:zGUcz6olW1tpanMMY5CqHB0tRZM7ZEQx/kjbB3ffdXf7h6og:zG7z7W1tpwYZB0TAEosjbx3Z7O","tlshash":"75b2b5a9f71e1276817a321c6b5f34cf327c88f8710998827d30255c7a9a54e07e6f5e","size":24302,"data":"","first_seen":"2025-10-05T00:26:49.128113Z","last_seen":"2026-01-31T12:27:18.949214Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=vNpZeOuePA4R\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fd26a524b53ddb7fd3160dbfdd7a905","sha1":"d2e9577be43e40f63b8e468937af7adad3f73019","sha256":"a35500049162ba12b63ad8c01eaaea78dee3615c51ed513054fa82f78dc02c30","sha512":"71bb20ce9da7fb10f9cf0050cf6fdd384cdcc2bce508fda65d41ed20d43fe9482addeb01f296a5e35a5149c87d9487c1cb123794602f46cee404e07785812aa5","ssdeep":"6144:tfTer22Z/EfzmMMO9nvnOpsGq1y2Y/IU/Arf7myaU00M4P389w3Cq:8NMMAvnOpsGqeIU/ArDr00M08Nq","tlshash":"b2d43bc87561f41953a351b5146f100bb73a291a984c86e4f268ecda38f9d8ea13ff3d","size":648489,"data":"","first_seen":"2025-12-11T03:09:59.422178Z","last_seen":"2026-02-16T23:18:21.510654Z","times_seen":95,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2025-12-11","alert":"Hunting_JS_WebAssembly","trigger":"store.fastly.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=vNpZeOuePA4R\u0026l=english\u0026_cdn=fastly","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/marketing_english-json.js?contenthash=3382aece6d8229926754","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea7147afc8007e737cf27890e2ab0d0b","sha1":"408908535546356f2c307121a894eac2f6ab90be","sha256":"9b95ff1749cf3b3d25de5d5bb72355b7caa21ed6c87c41af85174c0164bc64cb","sha512":"d9fa82cc388bb2f6fcd38849f28f0ed46919ad51f000380b100cb838461df04ae02307f8e533a66794275250b3d2bc981c0151c1fbdb813a5230262bcd176077","ssdeep":"384:+0YUHcvS/m+JAslpN+MhZxEOIqisxp9RO6orsH1XQSmRyeyZ/84t1SSzNQvIkoVS:MUHpm+blpNN7VMxsgE3kSd5/VQ472IeZ","tlshash":"e0b2a4b8f5376a2603cddee82dbefb0510bb80680748790c65645d2eb0f63d84a764f8","size":23720,"data":"","first_seen":"2025-12-10T12:22:30.004601Z","last_seen":"2026-01-05T18:17:44.165075Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winter-gift.cfd/id=5947221648/","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"86fac5d307fd236ccb8b6ab822b5ffd0","sha1":"2a7daa54a4fedc6e8c1f9a680ce87db3302aa026","sha256":"1881d7096ced4261ddaa8a0fba43ee5ca16c6ab0a469628d2350e37deb15ebc7","sha512":"feb0bdee3a8cc480bcd6fe47df6c83704172e3cc72f5beb12e7161d9ce066fd1cf506684e69da6f0e765d0ccc53ec34b1096244521075b3549cd3218d9b33dab","ssdeep":"","tlshash":"2980044401575514c73d1114434311003d400054100370505dd441511441c074454c51","size":32,"data":"","first_seen":"2024-08-04T20:33:49Z","last_seen":"2025-12-11T03:09:59.424506Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/main_english-json.js?contenthash=1338b0f0bf7bb31a8fb8","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1191c2c84badb969f3497359ac96f0d","sha1":"186c24ea9425cc11d5280705dae37a6ddf035ab6","sha256":"9e579e0f5a6fe05cd46e12360be8f5a6f261f2f23f631d0e2abe5b9ab95e4a62","sha512":"2b962704fae20763346ce147116cc1eef56dbe99dbdb5b836ccc47278fe6e762a89eb68d17b0d1c82692cc463e83ab38574b013bd892529aee3589498f886b19","ssdeep":"1536:V7aiXrllRAz5XfFLNh4iAEd2Wj7CHrp5ALMRmtQwU:5HlRQ5X9LNh4iAEdxj7CHULMRmtQwU","tlshash":"f083f90fda19097b978702b77e1e66e771e5c0e733e11c60bec8c82f12466c5622fa59","size":83264,"data":"","first_seen":"2025-12-10T12:22:30.038167Z","last_seen":"2025-12-15T17:37:59.290043Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winter-gift.cfd/id=5947221648/","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ed6fe4b6a4d8cfd17871d91d3a837f6","sha1":"a6d5553eb937cb129e4042a52d316e683d15a2b7","sha256":"544baa1691b99c9af31a94a33325971f6f91973af6aa95aff558b1757cf20cb1","sha512":"6b92365800cd36c2c7c18477cf933bacba1628fe3a178b1c9cd029ae53f7c3f61fcbfac58258c81ef035d9b17df6d0e0c21dfef70c49294321a0a5c31cb5efc8","ssdeep":"","tlshash":"2470000c388080288230280ea0380328a882038f0020e280000e080000082882aa2038","size":25,"data":"","first_seen":"2023-03-07T12:12:29Z","last_seen":"2026-04-15T21:35:20.191425Z","times_seen":860,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/modal.js?v=7G8uHr4fXaTj\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec6f2e1ebe1f5da4e35ce187b96f63b4","sha1":"9a3ba01d1a0b3a6972bea477b6c4ba647b1daa88","sha256":"30e30ee53b2d8690f2386fda09ab68f33236d28251752360188e536c866ed3a6","sha512":"a2f7f2c063f87aa2b4817136eecbf57cbdd8bd5f455c6bf741cbe95f8b7a7b8748eefa147231e50c4a8f3d5c01edd5d9929438beab6c5c6fd77f0edd569696ac","ssdeep":"","tlshash":"da51011adf6c063ae57d425fbc29eb99367d4432b10e1df0c86d2b5814e0e9b1687d28","size":2802,"data":"","first_seen":"2024-12-10T13:14:44.772055Z","last_seen":"2026-04-14T05:04:29.134171Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=lz_99vci25ux\u0026l=english\u0026_cdn=fastly\u0026load=effects,controls,slider","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"973ffdf6f722db9bb1e350b4c673f365","sha1":"a6c7d4331056cd37569fac3ee5f4b4e0e09b38cb","sha256":"658b209483f3b09ceabfab105ce9f15078138d646ca0e9abee2033606c852b19","sha512":"28ec015dd5dd389a56008983d64c69fbedf4c091e4478c8cf25c34db310516bc8cd1e0804fb554e26dfffe9b724b24b91df8ee1a5ed68153bc6bead655de0311","ssdeep":"1536:Ek3m7kQD+mlspqh2NrFIei4f9wiIVWaLcrZmKw1wF/IS58H1nRtW460kfR+U:zr4gO4f9wiJucrZE1xUJ5P","tlshash":"8183850d37ab262580dbb06a5f5f454db238411b1806dc58b8ad83d48fa9f3861f7fb9","size":87011,"data":"","first_seen":"2024-12-13T15:16:33.754695Z","last_seen":"2026-04-14T05:04:29.178406Z","times_seen":1593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/redeemwalletcode.js?v=cU8ZLoLtUa1P\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"714f192e82ed51ad4fe46f3f662873e9","sha1":"3fdc7571fc39939623aa8738d4f7893fe9cfbb68","sha256":"f262fff9b99c9e509ab6274988b09868da1d0e929c148227c7cba5ac0099b753","sha512":"ff68535bc298506b0c80ceba7cd091b33d471c7fa1cc10c0f52d2050edeada803779a6aefe6116f74852f8ff375b99c64eeba6633e794ff5045a73c82c21cb52","ssdeep":"384:OemLFWeQVifvuGwNhA5BXbZ2z1XSxgbmRxefs5rAXdoMaTMpwsSWWrBa3cGqpb:OJBXUz1skfNq99rkEb","tlshash":"d65284e6ff1e23056631022e19ce0899f6bd587595088db1fc6c877573a0c9c682eead","size":13849,"data":"","first_seen":"2024-12-10T13:14:44.764704Z","last_seen":"2026-04-14T05:04:29.178944Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winter-gift.cfd/id=5947221648/","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a73704f13d2cd5b578beb4e528d54cc","sha1":"04c066f03fc9f07167a9a02984bd6bb7d0b62373","sha256":"308ebb4f8ca092fe52edd465741ba152bf288cd43076ffab2e9ba80d9eeb4fb8","sha512":"ce8a6a692e75f88c1532850f14ace1a9f1011cd21959f20c9131b1e6047b269e550d7285832bc9fa549de2eccc55aa6e303c28071e600e47eccb993eb100c2e1","ssdeep":"","tlshash":"3fa022cc3020c0a00bc833cae0a2303ff80b0c0f08bce80b828b038080003b0038803a","size":71,"data":"","first_seen":"2024-11-12T14:20:45.817699Z","last_seen":"2026-04-15T21:35:20.192274Z","times_seen":327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/main.js?v=bhe8idkqvbAk\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"821926518e69d316b4769ac4cf9e1e87","sha1":"3657e34954d71a9fdaf8ffc0dcd21e71c871da33","sha256":"d94e80cfab2c1655c7fab8afd8ede0fdc96bd708a80dcc6bd65401379f74a2f9","sha512":"48aebb45f037d5ba56e666b2f622419343185bb70ef8a10a2c04f870f84e4131a4e606a70ed1950981c0eae60ccd19d6a069ab6aaee0789c6b0062bfe0337140","ssdeep":"12288:x5NhteskmKziRl5y6aFq5FP0Sh4zyyrVUC+usZ0ADTbKy6a:xxt95y/q3P0SmzycUC+usZ0ADTIa","tlshash":"97753ac036eaf5c2f79842d342361297f3245cb9b93985d4e3e4e86834989cda375fa4","size":1591503,"data":"","first_seen":"2025-12-10T12:22:29.999757Z","last_seen":"2025-12-17T07:40:39.971933Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winter-gift.cfd/id=5947221648/","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f6a907e14727f5f1f9402b2658c63b19","sha1":"0e2e6eeb1569382899a40160dcb5e94ea630ffa7","sha256":"988f152d380086d2fb115959158d1dee56ef9b984f952bae614db6113ead3948","sha512":"604ad8bf04cb53ac667dc8fad84f0f4a41cec4f8e880adf1b09f46a9c392ef46b53363765b4ea702fd7ef43db5a5b6327c5dec6624ddfa3994025548a723e6d4","ssdeep":"","tlshash":"bae075454c32187e5573a0e47a45555d573c053fe820dee52ac465fcedfbe072622f04","size":402,"data":"","first_seen":"2025-10-14T02:25:40.781464Z","last_seen":"2025-12-11T03:09:59.428133Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/auth_refresh.js?v=w6QbwI-5-j2S\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3a41bc08fb9fa3d925bfbde6930f313","sha1":"06bf235bae87234c3091962f40415b43492652e2","sha256":"8d764adbee3ffe7e61342a5b3be4c853c26c0a2c1e3eed1e63bb68cfee7944b0","sha512":"0ed874c12447dd3d84c745235d05c2b83ef47125f928aa87cf507a9189be1ff13a7f249ec207b09c5c64498991be4269039c18ff81bc26be92b78a5f4b6b1b55","ssdeep":"","tlshash":"6b31b9e09e8c0435137f009bbf2fbacd306e54725ed894a5bf05893a6c5830f97a5985","size":1527,"data":"","first_seen":"2024-11-16T08:41:12.910961Z","last_seen":"2026-04-16T10:23:02.344428Z","times_seen":1638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/shared_global.js?v=gOyfgA0bHRkL\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c79c16f587cb9769bc00917319aa6367","sha1":"f24f0e999d68a4ec3086209e60731f5d9932243c","sha256":"b015f5abf28f74d746422a6d8fb8a94c6c2900ceede04d86380148f198b4ccd2","sha512":"0f5360fbab606bd241765745411c0efa7a1876ad5416ef1c3a2fcc78138bcde0c5f88c018e14e9b9f9ce7838a663addc0c2231b771109b95f0172fcbabf2da36","ssdeep":"1536:ivZkXRWCQ2hNJRNhUmciMQzoscmDecTV8iqD3YXI1Sp6D3QgQHrMTAQaOLXkwRiS:J/5UmciZos1DecSP7YXVgOUXKfq","tlshash":"c6e329d5eb7c212a897a302ddd5f504a3a7e1832b00468297c5e94dc6ae0d7e43b7e7c","size":154337,"data":"","first_seen":"2025-11-07T03:42:38.468795Z","last_seen":"2026-01-12T00:22:16.991886Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/dynamicstore.js?v=iQ2CGpHeNwDH\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dcfe18025a696e1d53cb347b0eb3a146","sha1":"d8cf9a26bfb7bce43e402012954c3fd5c96f2116","sha256":"d10f4690ddf937d206e4c0851d41bc698c55d0507cd05fdd7dfc3bb00421437c","sha512":"4fb2fc1076ab044c9b379e753789ac90d84e4cae939306c60811814a6f441cc0699903743c229205e71717b23a9586397f69c215c3aad629290bfb8cbee5cfa4","ssdeep":"1536:fZ/cP7RyjTDWWN+ExG3QA4/4xM8c30vM6ELoc1neK39O6kCZRWXN8pxHf+YuMxZY:vpFA4mYeK39OQgTqIp","tlshash":"36931ab8a72e532e67b221fcad69a1c9f37c48f535468890bce4221874e4c4f53b5e1c","size":89705,"data":"","first_seen":"2025-09-27T10:35:36.733959Z","last_seen":"2026-01-19T01:36:39.903325Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winter-gift.cfd/id=5947221648/","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"493c13bcfd1c85944db5320d498f12c2","sha1":"0f7c5b5e3f805f305c57233af2e60dfc7aa248a4","sha256":"7c2daffe47701b499966f8e5f8b991c61baff282c1b0f7f11d9a8e4e936c44d1","sha512":"12072691b4b4deea0facc1875d3cb1fe23e6b015f186fc7fd14258c3da8f627388667da25591909dd5ae73fee6ae08fa6446f698441b1ae284e04cdd4ea61314","ssdeep":"","tlshash":"90f0f449bc7a147d926760e47641518d633c193fd450cee566c4ebf869fbe421b21f08","size":544,"data":"","first_seen":"2025-10-14T02:25:40.784772Z","last_seen":"2025-12-11T03:09:59.428964Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/manifest.js?v=VWHoUUnZEI3s\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"41c4c24343257151e33c698deef44821","sha1":"98b8c8d5c882870552789e4dde48029a139dc5aa","sha256":"b2d98ecb7f34eb9594a62002389f075f0722090e34b692042f3592af42cdc454","sha512":"3e043e3fc911f7b110e421f762b2a028eb7e27b0407f78ffa4ecf1a3702778281cd659123187d4db349eb9032264ad0117b7325464f64b7d250cc0f14c10935b","ssdeep":"384:+iBQyYo6hDqHwm/dIx+eE5NE1DExRaoP0mhzTVER3SQMHffQHQjEXcNUVb1/gP/Y:te/ZCwvmxTvhFEapY5b1/gP/bvRm","tlshash":"57a23a3dbf3cafcd297c29d76d9687a420842c1d6855448390edf36a0516b24bb12ebf","size":23144,"data":"","first_seen":"2025-12-10T12:22:30.027791Z","last_seen":"2025-12-11T03:09:59.414122Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/shared_english-json.js?contenthash=81b3833f8f9a222f1e67","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1a20088d69fb3132fea6e5edea4c5e9","sha1":"3fd951fa7aefbef9cc11a3df08601f8a450fc689","sha256":"abb586d49f7c35602f5489751e328fddac3d3573211c1a1d06e7ab5c3554218a","sha512":"aa5a00aebd902aa4ef77e4510dbfa760e56c390ec26dce08ad635e046e0da6442eda6f4563bc19dab2f705f5209729859892c8529094189ccf5e81546d29abb4","ssdeep":"3072:h0Ji0SpajCAQErjIr6fNZPdzr6oQOETtdBjOUAIHN4lb:h07AajpQwIefNZPp6oQOCi","tlshash":"e234280f9a4d6d76078703e7f64b2da36bb040df53461c219eca4d4f11da78aa33ba58","size":249239,"data":"","first_seen":"2025-12-02T14:18:22.549509Z","last_seen":"2026-01-12T03:18:17.127572Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/sales_english-json.js?contenthash=04e78d67ee20d3231eb2","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7afe30a39e22b12bfdff4506e2e8bc86","sha1":"1be1999c20ac42759d4cfe0db768389577f6faf3","sha256":"df0cc1dd9852631fab50c128f57eed12294d95cfe909b14d5a57d37214a41fd2","sha512":"6148215a5732d3a5fe302ab3de9b7d44b62bf92c75d47906a89b4b8a3e5291e37e46532d95586eab935dd4de2dac4c1a03775e7c1c4b3aaffec88e14a09413c8","ssdeep":"3072:xs4PKfx/onBTjIlCl02ArfKrxbJOggps5C:lmgnKlC4m5vQcC","tlshash":"6924551f56c003370b3b0695757db0c7b1748ca7a3c4a476aec7a139136ba19f1a6abc","size":211132,"data":"","first_seen":"2025-12-10T12:22:30.035734Z","last_seen":"2025-12-15T17:37:59.29201Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/shoppingcart_english-json.js?contenthash=7e657bd03df26c247a7e","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7ebd49ea96ad1360872eb5aabbdc0c9","sha1":"0fa12e61bca033d2f1cab1f01d46158479bac57c","sha256":"119ce49cc385b44868970470560fa6397b361d03258a10d576ec8ad6ca7ba835","sha512":"1e80efdf5d97e4844c6f03ec61b1d2f56ecdddd66101e871b425e4e2062a722502742fca4198f9cd4860a4dcba8920c3f8b34d299953e905b2df44c01dcdbf28","ssdeep":"384:+wZrzG9IBaL79GTdyIqgYjgpJVB5ZYTzvbjDp4gwZ:r8IBaL79GTdyIqgYjgpJVB5ZYTzvbjDc","tlshash":"5782734acd6553736de34ba0bed6a64f83b4a2d20274f9904fc8056d324f6c284bfd88","size":19029,"data":"","first_seen":"2025-12-10T12:22:30.008376Z","last_seen":"2026-01-05T18:17:44.139017Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winter-gift.cfd/711c77567d0252585e000448.js","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7905b3ffc2601ab4a42e6371688caae","sha1":"34ea7f99d3ab82110362a7e2c47eb2b13c642660","sha256":"f52ebc0ecc1164caa44aaee66ba4c96f13f3d52fe162a727af3a112921f3aa59","sha512":"8b35b77607791851983f95e80a2b50992c2f997968e8b29e530a5c1b86eaf5371da887a12695e8e5cbb97f2abc44215076fa8f84536d5ecbe8b6b485e6a64432","ssdeep":"6144:PIk/dBsYaIHzXxKMxbVxv6G6EzPJ1QAn4c9bN:wk/dBsYCGzP5n4c95","tlshash":"ec44c74073d0a85c539b8b7a331bb0d6f47a09af3c84495be151fc906ae6217faf9931","size":258558,"data":"","first_seen":"2025-12-10T16:30:36.069706Z","last_seen":"2025-12-16T22:49:50.577106Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/prototype-1.7.js?v=npJElBnrEO6W\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e92449419eb10ee96c56d803d2baa43","sha1":"5a2be7055866b8f35bd852d466ff590251a56d89","sha256":"a655fc19da796630bcf37112ccf749898e98c99e1b25bccef0bf3573665195e5","sha512":"19d0c715d50abf41cccf0a96bf9c4673c5059d8a0a9edddc00c243ae44e403e1b3641c8e7c3e57b58746423b0679af216398648a6a1a4f50f394a9c15104fb32","ssdeep":"1536:Pe/hr8bCUSFPlpV7N+XS+st304cM9FmKZFDlYUo7pKMaV/6FzKKVA8MjjOH2X1Ix:PIr8bCBPlp0u9F6UodjaVbX1oYVpwxA8","tlshash":"99f3309c7de66035822bf13e5a9f418cf27980171408ed55b89c85a46fb0d3896fafec","size":163315,"data":"","first_seen":"2023-10-31T01:09:46Z","last_seen":"2026-04-16T10:23:02.314817Z","times_seen":2037,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.11.3/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c811575fd210af968e09caa681917b9b","sha1":"0bf0ff43044448711b33453388c3a24d99e6cc9c","sha256":"d2f0522008bff05c6434e48ac8f11f7464331436a4d5d96a14a058a81a75c82e","sha512":"d2234d9e8dcc96bca55fafb83bb327f87c29ae8433fc296c48be3ef8c9a21a0a4305e14823e75416951eecd6221f56fbbb8c89d44b244a27be7b6bea310f2fd1","ssdeep":"6144:zK8SyEGdEXdujYWUl/plq/pGlgFld1HmcI48VirY7IXtu2Y5W5ZbHtQTiTXu5bgs:fljHmcI4q5W5FHttCnuJq7CjhBK1","tlshash":"b0a4a689f39c266a857a325d5c2e41ce723c8076d60158bfbc5c59dc29e883c42bbf79","size":469790,"data":"","first_seen":"2023-03-07T01:03:14Z","last_seen":"2026-04-16T15:28:51.769574Z","times_seen":3225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/jdMmXeCQEkPbnFDy9T04NbgJ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"23469e83aa8d546accb43e858fe08b8c","sha1":"e178b613b0992dc1a1781940214b46cecfeb933a","sha256":"ce27cbb2e1e99239ac5b2d37767ab1d1f4fb184f220229bb30b1851dfbeca57b","sha512":"1969430b84574fafdfb47f888161ed779cfc6400bc3d6bda8d844cd68cf5c87389021223ec6999586e145583078a8fac14ebc86ec13c0ad61ee5b83d808e602e","ssdeep":"6144:lm0QhuwklgqrSTwPndCKqo0Jcnh+ep0t1mLve5NSRq+KELL22rS/YMTqiNe0vTAL:U9r0gdcacZ7LW3SRq+fryBNPo","tlshash":"fa0539ec7913b6e10372b8f59477a288733e9566d80c182eb09585f13fb4848b476eb7","size":847558,"data":"","first_seen":"2025-12-03T15:20:55.803944Z","last_seen":"2026-04-15T08:16:14.292535Z","times_seen":17074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winter-gift.cfd/id=5947221648/","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d92c00c918501aedc10e43e4c8570cbc","sha1":"e839104e6903b2e69960c28e28c117e51ddad19d","sha256":"fbc489408eb56d4c59f696adb27512255ef9d2774d0f1ee372813fa7a09933f5","sha512":"95804d6013fa65910b724adedbf4eb050268dce7c3381ae86c5f79850f69948b555e4049a83d768331c08083a55de7af041c78d5eb6ac87381f483a9bdaafa42","ssdeep":"","tlshash":"97d0c9004c31e47d2d66b0af2166d55d062d08aa7420c4973a88a859ed6be070b28c7c","size":209,"data":"","first_seen":"2025-10-14T02:25:40.787878Z","last_seen":"2025-12-11T03:09:59.43063Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winter-gift.cfd/id=5947221648/","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a7fcafce8afdbb8bd3b75551e7a395b5","sha1":"83e931390c6088d91f023bc0e830d5e32aee3644","sha256":"6d91f62754d0fd5678dca1b6703ea864ce8886ad977f63b4b40c618a38690041","sha512":"6f757102bce9cff39f4dfa75cc5350d8f56b42b375d232bcfef3a27528fc10cf3dbaa566dbdd2581ade7753fa29efba7140bb1da9b5ffbb1c296bcd13e917c2a","ssdeep":"","tlshash":"2ad05e00ac31907c2ea970aba002868c223c1c7ad080c8d23488eda568fbe820b90e38","size":246,"data":"","first_seen":"2025-10-14T02:25:40.79138Z","last_seen":"2025-12-11T03:09:59.432687Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winter-gift.cfd/id=5947221648/","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"30ab3323cc6dd2758a6dfad1dc7a00ef","sha1":"0c291dcb0bf7012a0d4da4d469e2f44e2a1a6755","sha256":"037c5578f9bbc834dd1b36e8655cbe5f79045bde85de62575cac38b5ac125b72","sha512":"10654ea6e05fcfa76d17b2ba0a1a6567d1d50cfade908ca667a6884c19e9c38e9f81833fb4286147fdae8016940bb7d69436bed818c71ef01a470dd77693de1f","ssdeep":"","tlshash":"aab0120ef432ff9087d214e0c0b5c31df1241baad822fca0e604ccd18f2200911d454f","size":107,"data":"","first_seen":"2023-12-21T17:06:34Z","last_seen":"2026-04-16T10:23:02.389967Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winter-gift.cfd/id=5947221648/","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10e125bdf73f1fd37e6bd6965035ec3c","sha1":"d59623ba5979258463ea60b489696728d414889f","sha256":"35db477a8d0a72f6486eee0956b3a1c545573a1543f43f16a687d2401cd23386","sha512":"c9b634e62d7c595195815a4de6b5ea0637a6a1aaee7429326cf5d8f36ff7f6f9754e2cb11ed9b9eca706a135b68c6bcd98342c2d91aac281f9a22dc39c12ef8c","ssdeep":"","tlshash":"8bd0a737713775b476736428333eb710592220532086e93ab52d46ec4f0cf4a4f7a088","size":254,"data":"","first_seen":"2025-07-24T17:29:25.786777Z","last_seen":"2025-12-11T03:09:59.434797Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winter-gift.cfd/id=5947221648/","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e988e21eb3074461849bb61235f994d","sha1":"6c1fba3b5a1f199c3b5f779f869727b2c695907b","sha256":"5a44c4b90eb8b369e3cf27badb84b6dee8cbedb6ff98535e44c5fc864d6c8656","sha512":"7e67cbecd4eb0c4e9b19a20021f31c4f5ec61a1e544c196cd0c766be5009b19feb818f765e7f1ac2f67eb90630a14975a9c89de2d45842b12e97f8761dcfc835","ssdeep":"","tlshash":"c4e026bbbb230038e972c4afd11ed55815310117c04aa530782c92142f82608d742f90","size":340,"data":"","first_seen":"2025-07-24T14:20:49.507878Z","last_seen":"2025-12-11T03:09:59.435624Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d91ec3956aea93ae67b2ac9622c32ee","sha1":"f0dc6600139010ee6cf0bde5d244f7a42ae77f58","sha256":"6d35b8218095ac1b5acd7d3226081b4eb3a9ecc3fad6aa07997ae48d977d36b6","sha512":"a556f860b5aad74968412c6b41ed5d44c55fcafc65cb1b34735502c2bd3c89df185468481634f32987e9418132d6a14021074858ad19f7434eb20fb841c8a297","ssdeep":"192:h3ug34ZknOPADCO0Pzmla3uCXDJiC7ZEb9k9Hdqyo0WPn4PRP/4PaP34Pjc+8ubZ:h3ug4R4sylBEJpocOFJ2eu+vX","tlshash":"78725491f73d20ae407ab3be896d2388b33e40b65561f8757d7886743a4e4970392fe4","size":17318,"data":"","first_seen":"2025-09-27T06:23:36.318425Z","last_seen":"2026-04-15T05:52:11.192982Z","times_seen":614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winter-gift.cfd/id=5947221648/","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"50c30828a43e38d787bc92286800bb18","sha1":"d029432506452994ea4d321015dbfe3dcba179fa","sha256":"1a4ee0d2cb25e23e0a386452c53f77b0c0dd6ce4cd7a99f3c91884cabdd53647","sha512":"61da83ee2635b6dff26e31aefd3a225b02bc8c78cfd3bb450f4cad4affc7fbdcbeee649160798aba437fb6f19573f1503f9657da51b6834da12db8f0f147858c","ssdeep":"","tlshash":"6670002088c8083000ac00022202a2002808008028002000ab080c2a280080f08e0080","size":20,"data":"","first_seen":"2025-04-05T11:35:20.177742Z","last_seen":"2026-02-08T10:13:57.166878Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-16T21:14:35.475057Z","times_seen":118327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winter-gift.cfd/id=5947221648/","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ae41e2257a5b66a5114d214ca5d015b","sha1":"c644ba3eb8b701b85f07f3ec6b5f9ed27010f94f","sha256":"a935fd28e8d22f36e96272b36ecdbb3e5413d4d70f354619c72aad6b698d6bfd","sha512":"9dcfacc5d38e285cd8168cb54ea3510042340603bbecfa52c72d10a06adf05792985ca17cc97d9e0b191625ddf55217cdde407f6426377c0b8de03d0edee88d6","ssdeep":"","tlshash":"3ff0eda804f351620d1ba232104fa0c4f111c833e2188da0f60c6262cf710bd838ce88","size":492,"data":"","first_seen":"2025-07-06T23:42:41.738819Z","last_seen":"2026-02-08T10:13:57.168066Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/6571.js?contenthash=84f27d1105a52dcdaf55","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3042bc51e77f38e4fb19c3c47acbae94","sha1":"0078510979f8b3a0016ecb698f8973add60344d2","sha256":"8bc64570cbf624f2de2c917e092e720c5369a5090cef802d95c9aa2a9ee9c828","sha512":"98b8eb8f9f1db062ae2e734f1c2a7720e539b14821925904fdea9a763efa2f579dde1f8c7883a0b11601443d778bdecdd4626a211d1b3848a379676b9013eb47","ssdeep":"96:+TuQm7FqsjdubrViVR3KAFRvlC2mkIQGTQI1PxQig8oGMbBu:+k7A+zlC2aDQu","tlshash":"70d1fc8628083a3d876b339aef8b5496d5f5418ab01c1b4228e5537d0f367d493eb70f","size":6560,"data":"","first_seen":"2025-11-18T17:58:54.023932Z","last_seen":"2026-02-03T09:33:35.275837Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/dselect.js?v=sfK6UJLNp872\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b65656efbc19eb3828b4dbd0865f1ec9","sha1":"d71da675dd4ba87be97a93384f0817bbd865fae6","sha256":"2a90c3fc78ba41a6e360d8f602a8933fc6542e82251220234742288ed3db9d95","sha512":"87d7845163da613dad747ed9f30255f662400417eb96837744fbaf17ddd33c3d5dd8a8be97ceb1a9537b54655ac8ce5085553254c9afe625d6dfb3b8efbb26da","ssdeep":"192:MRfE8jdnRqi49tazp+SJ2GvZg2gECs148CgsaWEE+WTX1VbEIhksB:MhOdLSwCbCg8v1VT+Q","tlshash":"a722a650b32c27e910be007fccd99de8696ca8f68c025892bd5c81ac75d45aa13fdc1b","size":9997,"data":"","first_seen":"2025-06-23T01:45:43.484508Z","last_seen":"2026-03-30T04:34:39.748652Z","times_seen":188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=NXam5zydzNu8\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","size":93636,"data":"","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-04-16T20:29:09.785601Z","times_seen":31193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winter-gift.cfd/id=5947221648/","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"917fb49d13cfd88259f340715d38faec","sha1":"79468fd20c7e15f49fa2cf53d006f1cc4d05758f","sha256":"1e257ecd1f1a3f9bce32fb391ad21e0b3822b6eeb51c075fe1ef070e38e286c3","sha512":"717c933d485a22c8db15c49bfe823f77a3c99d72198c284136adcdcb4a8ecc46abbe355ee481630eb24620777d3a029e6d5b476435b0b30e495c239864380191","ssdeep":"","tlshash":"cb01264e30a354105ba7e57d65cb5634f120a103a00acd0d3ddd9241afe3a7ab190b8c","size":834,"data":"","first_seen":"2025-07-06T23:42:41.739758Z","last_seen":"2026-04-14T05:04:29.190553Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recaptcha.net/recaptcha/enterprise.js?render=explicit","fqdn":"recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cedd64750ef01510550b6ddcde6aeef6","sha1":"0bf900c81102dc24dd926599b9bd2a3e8be1322d","sha256":"ec56191574d54f8ca79744ac08c362eb2416cc25fbc3c5662220f52042f8036e","sha512":"0135a8e9c10a6014d7a4d9fb2754d9fc1f83ea3b196352c244f49e50c0b67e8022703865e1d4390a65ba6f75f3ea0b341adb0f518bb97c85e3dc25e01312e326","ssdeep":"","tlshash":"ed1100721719a07a0b7209e1d2fac771d491705cb16c4adc9256ea841eaaccfce06a95","size":1108,"data":"","first_seen":"2025-12-05T00:15:19.549018Z","last_seen":"2025-12-15T21:43:04.124401Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/main.js?v=wiAgKBaqWusf\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/javascript/main.js?v=wiAgKBaqWusf\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"IBr21mD23BIS\"\r\nx-integrity: \"sha384-KaksXCojJ/opF1uaSXJ9AHQwJAQbsg8ob9QXh+L8IbBGIJEzMEMCZLEJek/+R8PO\"\r\nlast-modified: Thu, 30 Apr 1970 05:59:49 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1765422562.341903,VS0,VE375\r\ncontent-length: 22676\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86323,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (367)","md5":"201af6d660f6dc12127817032854ddee","sha1":"784fe662c662941b2276c61df95d33bbc9a533ca","sha256":"1c1fb15238a029728128f9a4adc3b6126a4bc36578134abb658865d891ed6657","sha512":"ab63549870b419e04fc1173c513ac03210be0639fe5d7f46206fc84c8c863e39bdfc06b50af187d17aae9e7b98e7b0a941d136c62b42d2ded5c600fa89f7ae76","ssdeep":"1536:UqB6CKMhEnSF7D5dr+DUfMpauSa4ZRxwyWLWxLm46mAPeLcbGMS7ydSxkFXBwWP1:bBuqZn+6m","tlshash":"d783f7d4f79d01399479203cad1f90897a7e4871b900a8627d4e8aac75d092f43bbf7e","first_seen":"2025-09-03T01:33:28.311265Z","last_seen":"2026-01-28T11:44:53.28512Z","times_seen":64,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":388,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/css/buttons.css?v=ecbk11GZ8OUy\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/shared/css/buttons.css?v=ecbk11GZ8OUy\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"BZhNEtESfYSJ\"\r\nx-integrity: \"sha384-WR1NDuupLEK4yL9wDNN/G36HecidHf6UL4TJijRijlYDtO0KH2PQNjaGLh8BcmMk\"\r\nlast-modified: Thu, 30 Apr 1970 05:59:49 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1765422562.353218,VS0,VE679\r\ncontent-length: 4430\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36501,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"05984d12d1127d8489ba16224cf757b8","sha1":"5c5c95ffa7bd25710ad402567598333446483208","sha256":"6531f23b878cb46ef9d086cad8aa7a72814f207b65bf1f3bffb7f9be39056bce","sha512":"e65ecffc952eb1cd6f3cc8a6b7e5a339260427fe63b7ca8c6deaf11b0778f4632780930c2e31fee329d00da1e2b598de5f5cf7a4adc1f7d23306c1e93758ce50","ssdeep":"384:l5/z6bJaBhSdbiabUo7aZaKj6vvZfGW+I/n:rj6vvZfGW+I/n","tlshash":"e1f2ce99b38c70753237e1e065175fe86a7a109e88670f9efab5b2bc13da0ec1535813","first_seen":"2025-05-20T11:35:20.984378Z","last_seen":"2026-04-15T21:35:19.835221Z","times_seen":504,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":51,"dns":20,"connect":15,"send":0,"wait":698,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:12 GMT\r\netag: \"649bb1f0-ec1\"\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nage: 7789\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 113\r\nx-timer: S1765422562.353493,VS0,VE0\r\ncontent-length: 3777\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3777,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced","md5":"eabc76eb57feae44add7faead028521e","sha1":"4e3e53938fad15661d2d046a868338841a95db19","sha256":"fc9e6260a2706ae146282d77e67bc1b74688435f8912ab4c1932641eec28bffa","sha512":"5c6da6eeefddf321c2bc7e39a134e0a3140a9f93ad1560b2e102ef60ec218c29aae14ed344c79e25cc5493cd15551040d8c909de28dcab02034d787563104e07","ssdeep":"","tlshash":"eb717ce7323e5456e1f056c6015b52f69eb1a1080d2b4e09f224b77831ac63be38333d","first_seen":"2023-04-05T21:31:08Z","last_seen":"2026-04-16T10:23:02.316127Z","times_seen":6819,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/account/wallet_icon.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/images/account/wallet_icon.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-d54\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nage: 66213\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 316\r\nx-timer: S1765422562.353480,VS0,VE0\r\ncontent-length: 3412\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3412,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"59722f8b05d32484fbd8853cbf7859f2","sha1":"8c9a1b988324bb779bf273dcfb62e993103757ca","sha256":"fcbb90319848b9823c6829ed4abba0720f06674ae7e7ff762abe3b905dd3e24e","sha512":"a995853c47f43e3fc1291d6e2e1846b34a629d07d6189f33f79df84a9e381db87536a7b7ad183f123b30af9fc19bddb5367b987741d0ca3f1df86b849ff1a7ac","ssdeep":"","tlshash":"b1619ebfec20d0de99ee769209ec8202e7b4322c8646372880c1e5ed9022d075b59432","first_seen":"2023-05-21T20:35:46Z","last_seen":"2026-04-14T05:04:29.179487Z","times_seen":388,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:23.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://store.fastly.steamstatic.com/public/shared/css/shared_global.css?v=LkH7FFmHUNxE\u0026l=english\u0026_cdn=fastly\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:11 GMT\r\netag: \"649bb1ef-123\"\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\nvia: 1.1 varnish\r\nage: 1379\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1\r\nx-timer: S1765422563.357875,VS0,VE1\r\ncontent-length: 291\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":291,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced","md5":"a2796187c58c7e948159e37d6990ecc2","sha1":"4209cd85add507247f9ce5a87a8c9095b54ee417","sha256":"23341256db7f44b1f3811880fa2bae6b7748bbf6b62c544a162e38cf0d5c5082","sha512":"5ef103b8398507495c2708df8fcd82bdb763b1d580aaaa6cacfb805614764277c19e8ece5d890a8aafc004fc8c25e3ab2e67d6fbf373c432a9a0d7c36fa0890f","ssdeep":"","tlshash":"83d0ebf3a3e86d79fb52fe97d10180e0465fcaeb6004877889c3880447a81f880f2996","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-04-16T10:23:02.385252Z","times_seen":6758,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/6571.js?contenthash=84f27d1105a52dcdaf55","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:23.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/javascript/applications/store/6571.js?contenthash=84f27d1105a52dcdaf55 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\nlast-modified: Thu, 13 Nov 2025 19:43:20 GMT\r\netag: \"GDyysPgRdBA8\"\r\ncache-control: public,max-age=259200,must-revalidate\r\nexpires: Sun, 16 Nov 2025 19:44:21 GMT\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\nvia: 1.1 varnish\r\nage: 179574\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 32463\r\nx-timer: S1765422564.953162,VS0,VE0\r\ncontent-length: 6560\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6560,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6397)","md5":"3042bc51e77f38e4fb19c3c47acbae94","sha1":"0078510979f8b3a0016ecb698f8973add60344d2","sha256":"8bc64570cbf624f2de2c917e092e720c5369a5090cef802d95c9aa2a9ee9c828","sha512":"98b8eb8f9f1db062ae2e734f1c2a7720e539b14821925904fdea9a763efa2f579dde1f8c7883a0b11601443d778bdecdd4626a211d1b3848a379676b9013eb47","ssdeep":"96:+TuQm7FqsjdubrViVR3KAFRvlC2mkIQGTQI1PxQig8oGMbBu:+k7A+zlC2aDQu","tlshash":"70d1fc8628083a3d876b339aef8b5496d5f5418ab01c1b4228e5537d0f367d493eb70f","first_seen":"2025-11-18T17:58:54.023932Z","last_seen":"2026-02-03T09:33:35.275837Z","times_seen":87,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/images/popups/btn_arrow_down_padded.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:23.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://store.fastly.steamstatic.com/public/shared/css/shared_global.css?v=LkH7FFmHUNxE\u0026l=english\u0026_cdn=fastly\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:12 GMT\r\netag: \"649bb1f0-a1\"\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\nvia: 1.1 varnish\r\nage: 3024\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 50\r\nx-timer: S1765422563.358912,VS0,VE0\r\ncontent-length: 161\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced","md5":"f2dae37acac6b9d5a91caf1885c2f7d0","sha1":"5f80fdde9f702a1d7589bc5faf88c14066e26c32","sha256":"93b1fbe4f6245b62bfd4c8c3347abe0fe67ed711315e59bfadaebc9873d8d9b5","sha512":"8d7ff7133ab97d81985c50fa8fd93916b42b1ce812af21bc732dcae45d59b9154fcc965857235d925c471db191dfb79c0753c70c7a4d5b0285b908e396216805","ssdeep":"","tlshash":"95c08cc1bb64ed58dad20363a596802084a30a844a53836ca9a6c875023aa01c8d1f46","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-04-15T21:35:19.978542Z","times_seen":3450,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/shared_global.js?v=gOyfgA0bHRkL\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/shared/javascript/shared_global.js?v=gOyfgA0bHRkL\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"x5wW9YfLl2m8\"\r\nx-integrity: \"sha384-UNG3e3UNRdE3i9IOrvy37b5rS7tgLqz47stu2AHOL0a3EkvkLiEa/spHkeELEJlQ\"\r\nlast-modified: Thu, 30 Apr 1970 05:59:49 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1765422562.341552,VS0,VE844\r\ncontent-length: 43027\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154337,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2464)","md5":"c79c16f587cb9769bc00917319aa6367","sha1":"f24f0e999d68a4ec3086209e60731f5d9932243c","sha256":"b015f5abf28f74d746422a6d8fb8a94c6c2900ceede04d86380148f198b4ccd2","sha512":"0f5360fbab606bd241765745411c0efa7a1876ad5416ef1c3a2fcc78138bcde0c5f88c018e14e9b9f9ce7838a663addc0c2231b771109b95f0172fcbabf2da36","ssdeep":"1536:ivZkXRWCQ2hNJRNhUmciMQzoscmDecTV8iqD3YXI1Sp6D3QgQHrMTAQaOLXkwRiS:J/5UmciZos1DecSP7YXVgOUXKfq","tlshash":"c6e329d5eb7c212a897a302ddd5f504a3a7e1832b00468297c5e94dc6ae0d7e43b7e7c","first_seen":"2025-11-07T03:42:38.468795Z","last_seen":"2026-01-12T00:22:16.991886Z","times_seen":64,"resource_available":true,"data":null}},"time_used":890,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":857,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/footerLogo_valve_new.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/images/footerLogo_valve_new.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-a18\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nage: 83624\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 4430\r\nx-timer: S1765422562.353323,VS0,VE0\r\ncontent-length: 2584\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2584,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced","md5":"86a9ccc0b872f22006a48bc6c2500f4e","sha1":"0edccf2cbc869816135c6ff4c3eee0c49d0f41c1","sha256":"d8bbe461137d50211568449468a1981ef189248200eadd48c3141a9df0b8f7fc","sha512":"43ebd681fe137718e45153b9ce062ce9426ac57d6ce907bd3b1c7709bf6f6d2ab4b49e22f2dc4f203dedf860a895a4b58f4a01095e97722ce5f27935038f0b56","ssdeep":"","tlshash":"64513a2ae811ec4252ccecc2a4fbe9123a12c90057c4dbb5fddbd84b3f602d1452d8da","first_seen":"2023-04-05T21:31:08Z","last_seen":"2026-04-15T13:19:31.96967Z","times_seen":2663,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:23.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://winter-gift.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://store.fastly.steamstatic.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/octet-stream\r\nlast-modified: Wed, 28 Jun 2023 04:07:10 GMT\r\netag: \"649bb1ee-1e490\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\nvia: 1.1 varnish\r\nage: 86277\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 5243\r\nx-timer: S1765422563.330677,VS0,VE0\r\ncontent-length: 124048\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124048,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaSans","md5":"2d64caa5ecbf5e42cbb766ca4d85e90e","sha1":"147420abceb4a7fd7e486dddcfe68cda7ebb3a18","sha256":"045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f","sha512":"c96556ec57dac504919e806c7df536c4f86892b8525739289b2f2dbbf475de883a4824069dbdd4bb1770dd484f321563a00892e6c79d48818a4b95406bf1af96","ssdeep":"1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9","tlshash":"86c35c06f706d709dd240e3df9a1a3a9b358f8a57b1fcb0fa6856d65fc8e0852a441cc","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-04-16T10:23:02.336622Z","times_seen":6348,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgur.com/T9aFCWb.png","fqdn":"imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:23.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /T9aFCWb.png HTTP/1.1\r\nHost: imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nretry-after: 0\r\nlocation: https://i.imgur.com/T9aFCWb.png\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:24 GMT\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1765422564.030392,VS0,VE0\r\nserver: cat factory 1.0\r\nstrict-transport-security: max-age=300\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nx-frame-options: DENY\r\naccess-control-allow-origin: https://imgur.com\r\naccess-control-allow-credentials: false\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1040184,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":33,"dns":1,"connect":13,"send":0,"wait":14,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/css/shared_global.css?v=LkH7FFmHUNxE\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/shared/css/shared_global.css?v=LkH7FFmHUNxE\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"Xr8UEt8pTYrq\"\r\nx-integrity: \"sha384-LJ19rZIujuUBLlizyngsPrvbxvNswvCuvEeA89ga3dhjZ0BZWjMTZrbUFjicGByq\"\r\nlast-modified: Thu, 30 Apr 1970 05:59:49 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1765422562.353237,VS0,VE677\r\ncontent-length: 21200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86720,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1819)","md5":"5ebf1412df294d8aea32338bc30c2778","sha1":"8f7b99fe9f109ab6c96c0ec749ccfe4c20660129","sha256":"4e2bb7efcd0791009bf5791109ae781ee14b95764cfd93398e1f9b95ec4ff171","sha512":"9b0400f627808656bbfcd651fd824af04ffb33afb1b2f8a98e6d3bc5caa63b714acceb2d89308e595853334f4df967136833b41a926d6c45f543796908e57886","ssdeep":"1536:+NRsHeX5Czk1Pl9CqB2jVbMGeuyGLTYlyXS/05h0/+xebmRUgiVgrkC8+0i7b7LN:KplX4lzxQH9JnTcKBPLwHAfnYCC","tlshash":"bf83f733a691718b772f9495fa07ae2bb33f008b9b0d8f79f1a5396cd2841d41273649","first_seen":"2025-12-11T03:09:59.392805Z","last_seen":"2025-12-17T07:11:33.336751Z","times_seen":9,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":51,"dns":18,"connect":15,"send":0,"wait":698,"receive":1,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/shoppingcart_english-json.js?contenthash=7e657bd03df26c247a7e","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:23.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/javascript/applications/store/shoppingcart_english-json.js?contenthash=7e657bd03df26c247a7e HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\nlast-modified: Tue, 09 Dec 2025 23:46:04 GMT\r\netag: \"2uZWsm_0_mwE\"\r\ncache-control: public,max-age=259200,must-revalidate\r\nexpires: Fri, 12 Dec 2025 23:48:49 GMT\r\nedge-control: !no-store,!bypass-cache,max-age=259200\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\nvia: 1.1 varnish\r\nage: 98431\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 22994\r\nx-timer: S1765422564.947057,VS0,VE0\r\ncontent-length: 19029\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19029,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18862)","md5":"a7ebd49ea96ad1360872eb5aabbdc0c9","sha1":"0fa12e61bca033d2f1cab1f01d46158479bac57c","sha256":"119ce49cc385b44868970470560fa6397b361d03258a10d576ec8ad6ca7ba835","sha512":"1e80efdf5d97e4844c6f03ec61b1d2f56ecdddd66101e871b425e4e2062a722502742fca4198f9cd4860a4dcba8920c3f8b34d299953e905b2df44c01dcdbf28","ssdeep":"384:+wZrzG9IBaL79GTdyIqgYjgpJVB5ZYTzvbjDp4gwZ:r8IBaL79GTdyIqgYjgpJVB5ZYTzvbjDc","tlshash":"5782734acd6553736de34ba0bed6a64f83b4a2d20274f9904fc8056d324f6c284bfd88","first_seen":"2025-12-10T12:22:30.008376Z","last_seen":"2026-01-05T18:17:44.139017Z","times_seen":31,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"LZHsOVauqTrm\"\r\nx-integrity: \"sha384-Z1fe//FJh8h6mB+vqzgPdkYLTjbj4BM3+7OZ/WeOBLOO0XGD04EVLX/GNDeDWHy7\"\r\nlast-modified: Thu, 30 Apr 1970 05:59:49 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1765422562.341382,VS0,VE150\r\ncontent-length: 4812\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":17318,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"2d91ec3956aea93ae67b2ac9622c32ee","sha1":"f0dc6600139010ee6cf0bde5d244f7a42ae77f58","sha256":"6d35b8218095ac1b5acd7d3226081b4eb3a9ecc3fad6aa07997ae48d977d36b6","sha512":"a556f860b5aad74968412c6b41ed5d44c55fcafc65cb1b34735502c2bd3c89df185468481634f32987e9418132d6a14021074858ad19f7434eb20fb841c8a297","ssdeep":"192:h3ug34ZknOPADCO0Pzmla3uCXDJiC7ZEb9k9Hdqyo0WPn4PRP/4PaP34Pjc+8ubZ:h3ug4R4sylBEJpocOFJ2eu+vX","tlshash":"78725491f73d20ae407ab3be896d2388b33e40b65561f8757d7886743a4e4970392fe4","first_seen":"2025-09-27T06:23:36.318425Z","last_seen":"2026-04-15T05:52:11.192982Z","times_seen":614,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/redeemwalletcode.js?v=cU8ZLoLtUa1P\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/javascript/redeemwalletcode.js?v=cU8ZLoLtUa1P\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Fri, 26 Dec 2025 19:23:29 GMT\r\netag: \"cU8ZLoLtUa1P\"\r\nx-integrity: \"sha384-g/FHfL3JZ8071g2yqmm2oLSSd74gy3/fatNRIfqwMJ7L7/rwYApQLgETXI6Bwlu9\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nage: 180008\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 298\r\nx-timer: S1765422562.352507,VS0,VE0\r\ncontent-length: 3504\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13849,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text","md5":"714f192e82ed51ad4fe46f3f662873e9","sha1":"3fdc7571fc39939623aa8738d4f7893fe9cfbb68","sha256":"f262fff9b99c9e509ab6274988b09868da1d0e929c148227c7cba5ac0099b753","sha512":"ff68535bc298506b0c80ceba7cd091b33d471c7fa1cc10c0f52d2050edeada803779a6aefe6116f74852f8ff375b99c64eeba6633e794ff5045a73c82c21cb52","ssdeep":"384:OemLFWeQVifvuGwNhA5BXbZ2z1XSxgbmRxefs5rAXdoMaTMpwsSWWrBa3cGqpb:OJBXUz1skfNq99rkEb","tlshash":"d65284e6ff1e23056631022e19ce0899f6bd587595088db1fc6c877573a0c9c682eead","first_seen":"2024-12-10T13:14:44.764704Z","last_seen":"2026-04-14T05:04:29.178944Z","times_seen":133,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/main.js?v=bhe8idkqvbAk\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/javascript/applications/store/main.js?v=bhe8idkqvbAk\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"ghkmUY5p0xa0\"\r\nx-integrity: \"sha384-9d7GUA8QAu/Ewy0KYNvoC+pxi0kqBkUP75wQziDEqZCrpxce1hYoh2jnXYGeV09B\"\r\nlast-modified: Thu, 30 Apr 1970 05:59:49 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1765422562.352307,VS0,VE1248\r\ncontent-length: 414054\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1591503,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65373)","md5":"737e3b55834a10af08c0cbdbc2fd9a08","sha1":"93d0f4bb9828a1b262fb8da856ddb7ba9691c5a0","sha256":"001c15cb53576aa18c06e768fe237d46a1c962acff0f8dd19374dceb38d5f3bb","sha512":"1940e25280c9f67ba8e4c471e24ac27c28c2f60cfadb957355dc71ef30b53fed7d179859ffb59eda8691234f4e04b032924449444eba9fed5a402629a0abffaa","ssdeep":"6144:6zAUwBKvjrgxf5tdNhtp8srImIxziRl5RuIoGr/86NUkeDkePDed5FAOmhSRNKu0:x5NhteskmKziRl5y6aFq5FP0Sh41","tlshash":"c625e8c039eafa82b7a842d342361297f3244cb9f92d95d4e3e4e86434c85ce9775f64","first_seen":"2025-12-11T03:09:59.396851Z","last_seen":"2025-12-17T07:09:45.177706Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1271,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winter-gift.cfd/711c77567d025241510304660b4b5c17","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:27.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winter-gift.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 17:14:50 GMT","end":"Sun, 08 Mar 2026 18:13:23 GMT"},"fingerprint":{"sha1":"41:4D:ED:CD:E7:DC:A2:BD:4D:E8:4F:E1:80:8C:48:0C:59:89:32:3D","sha256":"7E:90:54:AF:9B:E8:93:C6:30:9B:AA:48:5A:89:3E:B7:57:DC:84:8B:64:6D:95:36:92:16:34:2C:B7:27:CB:10"}}},"request":{"raw":"POST /711c77567d025241510304660b4b5c17 HTTP/1.1\r\nHost: winter-gift.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://winter-gift.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.SRokT2cCt4TZxi190zqfWR0e6_QJM4xf.r45pZHdmfrnGhFgF.WbPBsjZmzcgFfCqTa6MbfFjlcwcmHCMm-rkbJrVrGuQpV8O411qHRE60iTtv4tjogTaPQ81gp9OAbjup34Pxu9ZMLmLW_XPIe5HzeE2hUyG6-OJpBlOP5qYiSsD5F4bpv-gsMCxLXE5UehiaK5DePh6owgvxSkRcbVEJ6PszE8pwOIQNPfcIMTzznEml9dsXchQMwqxNvGnDBFbm9ss3Lnmzchlru9mWxYenrkqk6cxt39422Jk12A2-vqUK1icUf_Xtf0EXNEBQGQlGG1mmCmNcZDF7.kbVRcuesvYBiRNr2In6HWQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODgsInNlY3JldCI6IjVlOTcwMzExMGRhMGI4NWM1NGZlNTkwNWNjNTRiMTkwIiwic2VydmljZSI6IlN0ZWFtIn0.U2w90vF_hNfGNWUkVeynDH8_yCXdSFWXp_yYo41Zwfk; timezoneOffset=0,0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 201 Created\r\ndate: Thu, 11 Dec 2025 03:09:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ruR2SsMPwor4c9uABxyK5kbEkOqpvpzUuN0sBUsNoBDoMUSBv1BHfzK9l2QwbxHYI340xQNO5%2Bi0xeESaYChgYGvbJTGG2Rd7hi11kDFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9ac1c889ff2f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-16T21:04:16.985078Z","times_seen":120662,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-11","alert":"Sinkholed","trigger":"winter-gift.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27748\r\ncf-ray: 9ac1c8668ad55699-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-15851\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1628421\r\nexpires: Tue, 01 Dec 2026 03:09:22 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IKVoJ%2FLURC18VaV%2Fys%2BhRjgdNDgYnE9rai9e236r13Qcu%2BSQ%2B05pMIuGr9MmNOVo%2Brpwqj1Q%2FuQH1IDUByLOh6G%2Fh1%2FQtHW%2FpjYLHeoX0KiD6YzR9kjQgQbGCC2wXddhAAwcGnU1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-16T21:14:35.475057Z","times_seen":118327,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":54,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.akamai.steamstatic.com/steam/clusters/about_i18n_assets/about_i18n_assets_0/wallet_card_img_english.png?t=1636143670","fqdn":"cdn.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.77.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Oct 2025 23:08:56 GMT","end":"Thu, 15 Jan 2026 23:08:55 GMT"},"fingerprint":{"sha1":"9B:13:B4:B7:20:7F:36:B1:0A:60:5C:00:6E:B4:7D:49:38:85:F5:A4","sha256":"68:3B:40:AB:40:3C:FD:5C:C6:92:D8:32:E2:78:54:69:FF:8A:C4:5C:D1:E8:16:8E:72:0B:CA:4A:22:7C:AE:6E"}}},"request":{"raw":"GET /steam/clusters/about_i18n_assets/about_i18n_assets_0/wallet_card_img_english.png?t=1636143670 HTTP/1.1\r\nHost: cdn.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 503402\r\nLast-Modified: Wed, 24 Sep 2014 18:08:02 GMT\r\nETag: \"54230882-7ae6a\"\r\nAccept-Ranges: bytes\r\nDate: Thu, 11 Dec 2025 03:09:23 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":503402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 406 x 719, 8-bit/color RGBA, non-interlaced","md5":"eaa918479400786006bc5a37e77075a2","sha1":"cb892a61d8643b235ac589d9e0fd7a4a97ce56a9","sha256":"69a47ea33e7fa0226b9f23b5837a9075f36a0ffc2e7adc2f5b30f564e1dad09c","sha512":"52bcd20485323c7451fcfbacf51a3e5366031198177ce53815ee031a451219755421da894edeb8e26a83ec84d7e52217b26158ddf5b0449bffe8f286b2238942","ssdeep":"12288:vyy70uBu8olN1OkoyLscRq3XNDLNLJ10A:vydHOkhhqXdN7","tlshash":"21b423629ee66b409c0f36b357b263eb701a684a1f7fe0494975c0d948fa708dc3e45d","first_seen":"2023-05-02T15:44:11Z","last_seen":"2026-04-14T05:04:29.122274Z","times_seen":1848,"resource_available":false,"data":null}},"time_used":1750,"timings":{"blocked":851,"dns":55,"connect":1,"send":0,"wait":3,"receive":18,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/v6/logo_steam_footer.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/images/v6/logo_steam_footer.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:22 GMT\r\netag: \"649bb1fa-b1b\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nage: 85336\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 4470\r\nx-timer: S1765422562.353318,VS0,VE0\r\ncontent-length: 2843\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2843,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced","md5":"41e851f8e42b6bf3414278871e93e8a2","sha1":"a3811c7e1157f77950ec1f0558293bc90e432e82","sha256":"399f74c4e69eac8b59b149293f9a573955fef0a62b242cfa70346070013e0966","sha512":"f3c3549f1390b52791196e6f19584cbd4c4db2b51fef78c9c607c944079fed69b75e8f88594c3d647f2ddc29f282bf41be455be328ab27c091b4a37c41b00965","ssdeep":"","tlshash":"8051d94ef9325d6074ccf94128ee23571a735b40ea928561ecdace9b06352f9880e5c3","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-04-15T13:19:31.964077Z","times_seen":2639,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winter-gift.cfd/908b7c69f4470f63ef9589286ab7d0f9bb279b6a6736/09b5f68739c78fb538adc4ae6719f62c2cfa1cf624d1.js","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:23.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winter-gift.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 17:14:50 GMT","end":"Sun, 08 Mar 2026 18:13:23 GMT"},"fingerprint":{"sha1":"41:4D:ED:CD:E7:DC:A2:BD:4D:E8:4F:E1:80:8C:48:0C:59:89:32:3D","sha256":"7E:90:54:AF:9B:E8:93:C6:30:9B:AA:48:5A:89:3E:B7:57:DC:84:8B:64:6D:95:36:92:16:34:2C:B7:27:CB:10"}}},"request":{"raw":"GET /908b7c69f4470f63ef9589286ab7d0f9bb279b6a6736/09b5f68739c78fb538adc4ae6719f62c2cfa1cf624d1.js HTTP/1.1\r\nHost: winter-gift.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.SRokT2cCt4TZxi190zqfWR0e6_QJM4xf.r45pZHdmfrnGhFgF.WbPBsjZmzcgFfCqTa6MbfFjlcwcmHCMm-rkbJrVrGuQpV8O411qHRE60iTtv4tjogTaPQ81gp9OAbjup34Pxu9ZMLmLW_XPIe5HzeE2hUyG6-OJpBlOP5qYiSsD5F4bpv-gsMCxLXE5UehiaK5DePh6owgvxSkRcbVEJ6PszE8pwOIQNPfcIMTzznEml9dsXchQMwqxNvGnDBFbm9ss3Lnmzchlru9mWxYenrkqk6cxt39422Jk12A2-vqUK1icUf_Xtf0EXNEBQGQlGG1mmCmNcZDF7.kbVRcuesvYBiRNr2In6HWQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODgsInNlY3JldCI6IjVlOTcwMzExMGRhMGI4NWM1NGZlNTkwNWNjNTRiMTkwIiwic2VydmljZSI6IlN0ZWFtIn0.U2w90vF_hNfGNWUkVeynDH8_yCXdSFWXp_yYo41Zwfk; timezoneOffset=0,0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"41-0AeMVzV1pApYTMktTMxeiuYqqUg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rtLrIzG08GdZbBaU0Oppz3PRiKBTwjJUWpC9W7HXqXrsvL%2F0%2FmSqw4T%2Ffi%2BFNcaDfBgJBsFvxCz2yapUutajplNNNlt1WL31BiA9ETBLEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ac1c86cacbf4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-11","alert":"Sinkholed","trigger":"winter-gift.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/dynamicstore.js?v=iQ2CGpHeNwDH\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/javascript/dynamicstore.js?v=iQ2CGpHeNwDH\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"3P4YAlppbh1T\"\r\nx-integrity: \"sha384-YnDex64zhrJQsTCtNiysYVt2As8plilVwSqWiFoCePaTTWkQtrNILUt1QwcO339g\"\r\nlast-modified: Thu, 30 Apr 1970 05:59:49 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1765422562.342079,VS0,VE753\r\ncontent-length: 23234\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89705,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"dcfe18025a696e1d53cb347b0eb3a146","sha1":"d8cf9a26bfb7bce43e402012954c3fd5c96f2116","sha256":"d10f4690ddf937d206e4c0851d41bc698c55d0507cd05fdd7dfc3bb00421437c","sha512":"4fb2fc1076ab044c9b379e753789ac90d84e4cae939306c60811814a6f441cc0699903743c229205e71717b23a9586397f69c215c3aad629290bfb8cbee5cfa4","ssdeep":"1536:fZ/cP7RyjTDWWN+ExG3QA4/4xM8c30vM6ELoc1neK39O6kCZRWXN8pxHf+YuMxZY:vpFA4mYeK39OQgTqIp","tlshash":"36931ab8a72e532e67b221fcad69a1c9f37c48f535468890bce4221874e4c4f53b5e1c","first_seen":"2025-09-27T10:35:36.733959Z","last_seen":"2026-01-19T01:36:39.903325Z","times_seen":78,"resource_available":true,"data":null}},"time_used":796,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":767,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 14 Nov 2024 00:18:58 GMT\r\netag: \"673541f2-e3e\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nage: 10129\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 143\r\nx-timer: S1765422562.353434,VS0,VE0\r\ncontent-length: 3646\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3646,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31aabe1e01f27b3b9b47d7265807afc2","sha1":"a430f5a8a81145215c41c3ba80929627e570d81e","sha256":"3a4d08139646d567a612f75b8179641c570d490f8013478d131266ed21f3d453","sha512":"60dfb140295124b3f6b57592504ca6006c22988bba82bf63c5559fa7f8da2aab7e163265abb2a312034875f95fa850bbacb620ecca6c56ea8e79689963cd31c4","ssdeep":"","tlshash":"f971b4cc17338be06595c27e1e7476d223b365a9e8b001e8a3920c202c0bfe69a64d75","first_seen":"2023-10-31T01:09:47Z","last_seen":"2026-04-16T10:23:02.366056Z","times_seen":2394,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/ico/ico_twitter.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/images/ico/ico_twitter.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 06 Dec 2023 00:00:29 GMT\r\netag: \"656fb99d-596\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nage: 4766\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 9224\r\nx-timer: S1765422562.353253,VS0,VE0\r\ncontent-length: 1430\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1430,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"afc159fe5f0f26fa7282505da9887cc3","sha1":"c1cd55380c2af435876989f94e8b0715042c2ade","sha256":"4be942a34871dd6f8f14b43d27c31b049be7f6544c05685d4f35abdd329de176","sha512":"8f7dcb7e99ceed8f86575a05ff7d329ee2fc67cd18c6d53b2833a6aa1eede2586d57688f27901d941d2b6351412957468cce5ca69101d86911390bf04fd82763","ssdeep":"","tlshash":"24217419f8b59b11838ade4029d7d03b9d279880cadcd9b629ced4875c742fe987c8c7","first_seen":"2023-12-07T16:24:36Z","last_seen":"2026-04-15T13:19:31.966702Z","times_seen":2326,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/main_english-json.js?contenthash=1338b0f0bf7bb31a8fb8","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:23.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/javascript/applications/store/main_english-json.js?contenthash=1338b0f0bf7bb31a8fb8 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\nlast-modified: Tue, 09 Dec 2025 23:46:04 GMT\r\netag: \"giaDfXTv5-Y7\"\r\ncache-control: public,max-age=259200,must-revalidate\r\nexpires: Fri, 12 Dec 2025 23:48:49 GMT\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\nvia: 1.1 varnish\r\nage: 98431\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 23170\r\nx-timer: S1765422564.934612,VS0,VE0\r\ncontent-length: 83264\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83264,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65369)","md5":"d1191c2c84badb969f3497359ac96f0d","sha1":"186c24ea9425cc11d5280705dae37a6ddf035ab6","sha256":"9e579e0f5a6fe05cd46e12360be8f5a6f261f2f23f631d0e2abe5b9ab95e4a62","sha512":"2b962704fae20763346ce147116cc1eef56dbe99dbdb5b836ccc47278fe6e762a89eb68d17b0d1c82692cc463e83ab38574b013bd892529aee3589498f886b19","ssdeep":"1536:V7aiXrllRAz5XfFLNh4iAEd2Wj7CHrp5ALMRmtQwU:5HlRQ5X9LNh4iAEdxj7CHULMRmtQwU","tlshash":"f083f90fda19097b978702b77e1e66e771e5c0e733e11c60bec8c82f12466c5622fa59","first_seen":"2025-12-10T12:22:30.038167Z","last_seen":"2025-12-15T17:37:59.290043Z","times_seen":5,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/fonts/MotivaSans-Bold.ttf?v=4.015","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:23.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/shared/fonts/MotivaSans-Bold.ttf?v=4.015 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://winter-gift.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://store.fastly.steamstatic.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/octet-stream\r\nlast-modified: Wed, 28 Jun 2023 04:07:10 GMT\r\netag: \"649bb1ee-1e3ec\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\nvia: 1.1 varnish\r\nage: 228\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 7\r\nx-timer: S1765422564.982936,VS0,VE0\r\ncontent-length: 123884\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":123884,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 22 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansBold4.015;Plau;MotivaSans-B","md5":"6168553bef8c73ba623d6fe16b25e3e9","sha1":"4a31273b6f37f1f39b855edd0b764ec1b7b051e0","sha256":"d5692b785e18340807d75f1a969595bc8b1c408fb6fd63947775705e6d6baa66","sha512":"0246cee85a88068ca348694d38e63d46c753b03afadf8be76eca18d21e3de77b495215ed2384d62658a391104f9e00df8605edb77339366df332c75691928efb","ssdeep":"1536:M+s43BGZsrolB21EJ4q+GIbdSW7VvCtQXjPM3mz1yxvjWRVIoFMe1V13836GKCnY:T1GZXlB2SUbxVv/zM3mZyxLUZGrSDfj9","tlshash":"a7c35b46b302e745fe754e3d62a69396b318f4a93b1fc30ba5857e75fc8a0a60d841cc","first_seen":"2023-04-05T18:36:18Z","last_seen":"2026-04-16T10:23:02.348083Z","times_seen":3450,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/T9aFCWb.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:24.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /T9aFCWb.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 Dec 2024 07:01:29 GMT\r\netag: \"51ca4442fe09609762b7c903571b267f\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: PHL51-P1\r\nx-amz-cf-id: 8mQ1Pgg6ZFa5TfyJ22w5BjDENmAltJdGDofYvbvQrwiV4LODGZXacw==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:24 GMT\r\nage: 303525\r\nx-served-by: cache-iad-kjyo7100149-IAD, cache-hel1410024-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 59, 1\r\nx-timer: S1765422564.129269,VS0,VE4\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 1040184\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1040184,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 3840x2160, components 3","md5":"51ca4442fe09609762b7c903571b267f","sha1":"82d52b49cfa937e8c5c6607cc3090048c50f16fa","sha256":"bd0704da0667d788a09e2ae5e6430b827b2fbbec6e019c0fcabc361d33de4810","sha512":"29365cba45e96331803393f33f8cba51afeee9c465e1fe028960b79cec3767aaa15002e88918af9817ec40c8453943da1e285c9263e760ce7a5663909ba4c560","ssdeep":"24576:8lMEP5LPzMWQUpeXCYJU487qQNu+KtonMwFJXgXmy:VE1zMceXC/487HA0MigXmy","tlshash":"f2252324c7f096304d2ae32f7d196402811eac5f1fc9af66b2fe5782a2e433a5d5825d","first_seen":"2024-12-12T13:35:38.664611Z","last_seen":"2026-02-28T08:20:30.076994Z","times_seen":225,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":18,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=NXam5zydzNu8\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/shared/javascript/jquery-1.8.3.min.js?v=NXam5zydzNu8\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Sun, 18 May 2025 23:42:36 GMT\r\netag: \"NXam5zydzNu8\"\r\nx-integrity: \"sha384-lifoBlbdwizTl3Yoe612uhI3AcOam/QtWkozF7SuiACaf5UJl5reOYu4MigVxrCH\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nage: 691062\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 6659\r\nx-timer: S1765422562.341297,VS0,VE0\r\ncontent-length: 33378\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93636,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65483)","md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-04-16T20:29:09.785601Z","times_seen":31193,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winter-gift.cfd/711c77567d0252585e000448.js","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winter-gift.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 17:14:50 GMT","end":"Sun, 08 Mar 2026 18:13:23 GMT"},"fingerprint":{"sha1":"41:4D:ED:CD:E7:DC:A2:BD:4D:E8:4F:E1:80:8C:48:0C:59:89:32:3D","sha256":"7E:90:54:AF:9B:E8:93:C6:30:9B:AA:48:5A:89:3E:B7:57:DC:84:8B:64:6D:95:36:92:16:34:2C:B7:27:CB:10"}}},"request":{"raw":"GET /711c77567d0252585e000448.js HTTP/1.1\r\nHost: winter-gift.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.SRokT2cCt4TZxi190zqfWR0e6_QJM4xf.r45pZHdmfrnGhFgF.WbPBsjZmzcgFfCqTa6MbfFjlcwcmHCMm-rkbJrVrGuQpV8O411qHRE60iTtv4tjogTaPQ81gp9OAbjup34Pxu9ZMLmLW_XPIe5HzeE2hUyG6-OJpBlOP5qYiSsD5F4bpv-gsMCxLXE5UehiaK5DePh6owgvxSkRcbVEJ6PszE8pwOIQNPfcIMTzznEml9dsXchQMwqxNvGnDBFbm9ss3Lnmzchlru9mWxYenrkqk6cxt39422Jk12A2-vqUK1icUf_Xtf0EXNEBQGQlGG1mmCmNcZDF7.kbVRcuesvYBiRNr2In6HWQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODgsInNlY3JldCI6IjVlOTcwMzExMGRhMGI4NWM1NGZlNTkwNWNjNTRiMTkwIiwic2VydmljZSI6IlN0ZWFtIn0.U2w90vF_hNfGNWUkVeynDH8_yCXdSFWXp_yYo41Zwfk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\ncontent-type: application/javascript\r\ncontent-disposition: inline\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nlast-modified: Wed, 10 Dec 2025 13:33:57 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0yoVNlSutJS420pizK3jNMqT3ltXKuLQfJoygE74VWdsjewdj3%2F0leCioTcDVM14eQumKFrQfoQiYEdvl9%2BRNAjgOhVa9ooBKGYcKAyBsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9ac1c8661f4d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":258558,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a7905b3ffc2601ab4a42e6371688caae","sha1":"34ea7f99d3ab82110362a7e2c47eb2b13c642660","sha256":"f52ebc0ecc1164caa44aaee66ba4c96f13f3d52fe162a727af3a112921f3aa59","sha512":"8b35b77607791851983f95e80a2b50992c2f997968e8b29e530a5c1b86eaf5371da887a12695e8e5cbb97f2abc44215076fa8f84536d5ecbe8b6b485e6a64432","ssdeep":"6144:PIk/dBsYaIHzXxKMxbVxv6G6EzPJ1QAn4c9bN:wk/dBsYCGzP5n4c95","tlshash":"ec44c74073d0a85c539b8b7a331bb0d6f47a09af3c84495be151fc906ae6217faf9931","first_seen":"2025-12-10T16:30:36.069706Z","last_seen":"2025-12-16T22:49:50.577106Z","times_seen":20,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-11","alert":"Sinkholed","trigger":"winter-gift.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/dselect.js?v=sfK6UJLNp872\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/shared/javascript/dselect.js?v=sfK6UJLNp872\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"tlZW77wZ6zgo\"\r\nx-integrity: \"sha384-6x8voScnfYYgELgW7dvrdVYGUJzYWeoAoR/lVSpPe2Bw1Bovdg9MRjP+0M1Dx8ae\"\r\nlast-modified: Thu, 30 Apr 1970 05:59:49 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1765422562.352494,VS0,VE188\r\ncontent-length: 3017\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9997,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"b65656efbc19eb3828b4dbd0865f1ec9","sha1":"d71da675dd4ba87be97a93384f0817bbd865fae6","sha256":"2a90c3fc78ba41a6e360d8f602a8933fc6542e82251220234742288ed3db9d95","sha512":"87d7845163da613dad747ed9f30255f662400417eb96837744fbaf17ddd33c3d5dd8a8be97ceb1a9537b54655ac8ce5085553254c9afe625d6dfb3b8efbb26da","ssdeep":"192:MRfE8jdnRqi49tazp+SJ2GvZg2gECs148CgsaWEE+WTX1VbEIhksB:MhOdLSwCbCg8v1VT+Q","tlshash":"a722a650b32c27e910be007fccd99de8696ca8f68c025892bd5c81ac75d45aa13fdc1b","first_seen":"2025-06-23T01:45:43.484508Z","last_seen":"2026-03-30T04:34:39.748652Z","times_seen":188,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/modal.js?v=7G8uHr4fXaTj\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/javascript/modal.js?v=7G8uHr4fXaTj\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Thu, 14 May 2026 22:10:15 GMT\r\netag: \"7G8uHr4fXaTj\"\r\nx-integrity: \"sha384-nU+6qTzBsL1A6gC/vB0aigkn8+0M8RpWzQA7/5Kql0frM17AHth6nQYPG+x+gJp0\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nage: 694500\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 296\r\nx-timer: S1765422562.352439,VS0,VE0\r\ncontent-length: 1043\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2802,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text","md5":"ec6f2e1ebe1f5da4e35ce187b96f63b4","sha1":"9a3ba01d1a0b3a6972bea477b6c4ba647b1daa88","sha256":"30e30ee53b2d8690f2386fda09ab68f33236d28251752360188e536c866ed3a6","sha512":"a2f7f2c063f87aa2b4817136eecbf57cbdd8bd5f455c6bf741cbe95f8b7a7b8748eefa147231e50c4a8f3d5c01edd5d9929438beab6c5c6fd77f0edd569696ac","ssdeep":"","tlshash":"da51011adf6c063ae57d425fbc29eb99367d4432b10e1df0c86d2b5814e0e9b1687d28","first_seen":"2024-12-10T13:14:44.772055Z","last_seen":"2026-04-14T05:04:29.134171Z","times_seen":145,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/x9x9.gif","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/images/x9x9.gif HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/gif\r\nlast-modified: Wed, 28 Jun 2023 04:07:21 GMT\r\netag: \"649bb1f9-3a\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nage: 66213\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 316\r\nx-timer: S1765422562.353394,VS0,VE0\r\ncontent-length: 58\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 9 x 9","md5":"c85b970b4c832e361445c1b446cc2343","sha1":"57e60c2f1f1f919a871b7c171c6d59d42e3adbe5","sha256":"5ce28d7cf05f0e6eeaa3788a393d9980e9b51130963c6b9672d3447b6b11de6d","sha512":"060b2ba825cd60ea3fad5fcace496a77b528210aeab0092a24b4c438eb2acac4166e0c3b704cd3a4d8fa8fb034b0c7a4b5f45e242a7bdad26580f3236382620e","ssdeep":"","tlshash":"b9a00244859d9430d154a4330d1517555b6cb101865c2f32716911249d4b4a015a7264","first_seen":"2023-05-02T13:29:25Z","last_seen":"2026-04-16T10:45:15.579644Z","times_seen":1753,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=tvQi85mXnRZH\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/shared/javascript/shared_responsive_adapter.js?v=tvQi85mXnRZH\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"cOPkuDRAsmuy\"\r\nx-integrity: \"sha384-2/Y8bg7jQe9lP4rz9Q93WaXCzUlB0IIJLlyBNIOhmhYglqJSBjoJza3s4m8DgBhr\"\r\nlast-modified: Thu, 30 Apr 1970 05:59:49 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1765422562.352486,VS0,VE670\r\ncontent-length: 7001\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24302,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"70e3e4b83440b26bb2eaa98e48d334ea","sha1":"081d5c91afa9143e52f826bcdcdb818c45a30268","sha256":"90b6c0471116539c1c99bc77b8152872984e3f3cba97c53b8566efbd483a299b","sha512":"5ca47d2be70514e43753713ef737a61752ec142ea628596bcc5a0bf6514c4aae57614c584d15c830d0a1f47cb0cc70b550f10c524173e6e1f9a41d1a2a74018c","ssdeep":"384:zGUcz6olW1tpanMMY5CqHB0tRZM7ZEQx/kjbB3ffdXf7h6og:zG7z7W1tpwYZB0TAEosjbx3Z7O","tlshash":"75b2b5a9f71e1276817a321c6b5f34cf327c88f8710998827d30255c7a9a54e07e6f5e","first_seen":"2025-10-05T00:26:49.128113Z","last_seen":"2026-01-31T12:27:18.949214Z","times_seen":235,"resource_available":true,"data":null}},"time_used":706,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":694,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.11.3/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /ui/1.11.3/jquery-ui.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-72b1e\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nage: 3154945\r\nx-served-by: cache-lga21958-LGA, cache-hel1410025-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 456, 264\r\nx-timer: S1765422562.403510,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 113814\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":469790,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (547)","md5":"c811575fd210af968e09caa681917b9b","sha1":"0bf0ff43044448711b33453388c3a24d99e6cc9c","sha256":"d2f0522008bff05c6434e48ac8f11f7464331436a4d5d96a14a058a81a75c82e","sha512":"d2234d9e8dcc96bca55fafb83bb327f87c29ae8433fc296c48be3ef8c9a21a0a4305e14823e75416951eecd6221f56fbbb8c89d44b244a27be7b6bea310f2fd1","ssdeep":"6144:zK8SyEGdEXdujYWUl/plq/pGlgFld1HmcI48VirY7IXtu2Y5W5ZbHtQTiTXu5bgs:fljHmcI4q5W5FHttCnuJq7CjhBK1","tlshash":"b0a4a689f39c266a857a325d5c2e41ce723c8076d60158bfbc5c59dc29e883c42bbf79","first_seen":"2023-03-07T01:03:14Z","last_seen":"2026-04-16T15:28:51.769574Z","times_seen":3225,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":18,"connect":26,"send":0,"wait":26,"receive":55,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winter-gift.cfd/711c77567d025241510304660b4b5c17","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winter-gift.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 17:14:50 GMT","end":"Sun, 08 Mar 2026 18:13:23 GMT"},"fingerprint":{"sha1":"41:4D:ED:CD:E7:DC:A2:BD:4D:E8:4F:E1:80:8C:48:0C:59:89:32:3D","sha256":"7E:90:54:AF:9B:E8:93:C6:30:9B:AA:48:5A:89:3E:B7:57:DC:84:8B:64:6D:95:36:92:16:34:2C:B7:27:CB:10"}}},"request":{"raw":"POST /711c77567d025241510304660b4b5c17 HTTP/1.1\r\nHost: winter-gift.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://winter-gift.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.SRokT2cCt4TZxi190zqfWR0e6_QJM4xf.r45pZHdmfrnGhFgF.WbPBsjZmzcgFfCqTa6MbfFjlcwcmHCMm-rkbJrVrGuQpV8O411qHRE60iTtv4tjogTaPQ81gp9OAbjup34Pxu9ZMLmLW_XPIe5HzeE2hUyG6-OJpBlOP5qYiSsD5F4bpv-gsMCxLXE5UehiaK5DePh6owgvxSkRcbVEJ6PszE8pwOIQNPfcIMTzznEml9dsXchQMwqxNvGnDBFbm9ss3Lnmzchlru9mWxYenrkqk6cxt39422Jk12A2-vqUK1icUf_Xtf0EXNEBQGQlGG1mmCmNcZDF7.kbVRcuesvYBiRNr2In6HWQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODgsInNlY3JldCI6IjVlOTcwMzExMGRhMGI4NWM1NGZlNTkwNWNjNTRiMTkwIiwic2VydmljZSI6IlN0ZWFtIn0.U2w90vF_hNfGNWUkVeynDH8_yCXdSFWXp_yYo41Zwfk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 201 Created\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EGEaMY1Sg4Lt%2FiqMGkuhAzTJW%2FlfTmSMvQN311K8fxt0Mko8L%2FcX6ENB1igsQZFe6C359td8x%2BNRpkM7TyrfOx60kH5tUsyPI1LicNogPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9ac1c86a3aae4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-16T21:04:16.985078Z","times_seen":120662,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-11","alert":"Sinkholed","trigger":"winter-gift.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.steampowered.com/IClientMetricsService/ReportClientError/v1","fqdn":"api.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:34.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steampowered.com","organization":"Valve Corp"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:66:D7:D2:99:D6:A1:56:A5:A6:D9:94:5C:88:56:DD:5C:41:8E:49","sha256":"C5:81:A7:0E:F1:39:43:B6:7A:5C:E3:67:B5:C9:6C:8C:D4:AD:B1:96:E3:F0:6B:88:9F:83:D4:2D:94:97:36:7C"}}},"request":{"raw":"POST /IClientMetricsService/ReportClientError/v1 HTTP/1.1\r\nHost: api.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: multipart/form-data; boundary=---------------------------3953491873249728124852761840\r\nContent-Length: 1943\r\nOrigin: https://winter-gift.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1943,"data":"-----------------------------3953491873249728124852761840\r\nContent-Disposition: form-data; name=\"input_protobuf_encoded\"\r\n\r\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\r\n-----------------------------3953491873249728124852761840--\r\n"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-length: 0\r\nexpires: Thu, 11 Dec 2025 03:09:34 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Thu, 11 Dec 2025 03:09:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":22,"dns":3,"connect":1,"send":0,"wait":186,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=YzJgj1FjzW34\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/shared/css/motiva_sans.css?v=YzJgj1FjzW34\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Sun, 18 May 2025 23:42:36 GMT\r\netag: \"YzJgj1FjzW34\"\r\nx-integrity: \"sha384-8Mx0sTcnCZvBno56DpQQEfbTlesmKxxJozFgeV4x3Z5jsf3hwLgm/ZZL7AmLPQZL\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nage: 1814690\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 4235\r\nx-timer: S1765422562.340511,VS0,VE0\r\ncontent-length: 625\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2568,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"6332608f5163cd6df8796cfa8a99fe80","sha1":"cc0739fefcf56fc1c4f60c531e470134251747eb","sha256":"d4c043cef21ba8cb6b3bdf0e4f48522987b298607a576046195696430e403e4a","sha512":"3d394f47d64585ebef5eac576788e55b9f274b991394ceffa26776ef790435a94809c2a54ab21e1a3fdef001d21e9c922909ea673547824cef6a44ef0bc6d66d","ssdeep":"","tlshash":"6851de84655cd13f5fe80c83f3cb6d269e0f342a30aac975c5a31a94afa143a0375b5a","first_seen":"2024-11-16T08:41:12.896558Z","last_seen":"2026-04-15T21:35:20.056865Z","times_seen":602,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":50,"dns":25,"connect":13,"send":0,"wait":14,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/css/v6/account.css?v=I-p68OdyrcJu\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/css/v6/account.css?v=I-p68OdyrcJu\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"NVHYwBy9ehpw\"\r\nx-integrity: \"sha384-vxibWIEIveBosMEKjxCUtt+Uqyxzm8YnTDpe9zQkaCD4NHdMf9F1A2mBAdcK6nsC\"\r\nlast-modified: Thu, 30 Apr 1970 05:59:49 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1765422562.367732,VS0,VE604\r\ncontent-length: 5702\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21666,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"3551d8c01cbd7a1a70135d1a13ff4452","sha1":"676db07c13fd7e1a15c6f95353550410d386018f","sha256":"3f81c253b36c7874806554e3ecb07f0fe0382ba65e84d1cb2c9d977725b725b3","sha512":"4dc3ab62cece972806d51cb98a678c23a44a50903d3a0039d746e767d1fe0f0cfcc0e3e36d57422ba9ff22aea82be9cfa730717be6c9dd64ef5b31ed529000a1","ssdeep":"384:Y7g7u7T7RLxXpU4jfz27MWu9aHyFCezUyBnAXwjKbCjHpyrq7AMC7WJhj:Y7g7u7T7RLxXpVjfz27MWuoyUyBn+wj7","tlshash":"16a22f13ab913c8ab50fa5adfed5d7ba571f00839e1e4f6eb5a4342d83081e40537ac8","first_seen":"2025-07-09T07:33:08.26611Z","last_seen":"2026-01-05T16:27:00.399618Z","times_seen":82,"resource_available":false,"data":null}},"time_used":778,"timings":{"blocked":66,"dns":21,"connect":26,"send":0,"wait":617,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/shared_english-json.js?contenthash=81b3833f8f9a222f1e67","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:23.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/javascript/applications/store/shared_english-json.js?contenthash=81b3833f8f9a222f1e67 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\nlast-modified: Mon, 01 Dec 2025 22:28:16 GMT\r\netag: \"-H3k4Rk1QI3E\"\r\ncache-control: public,max-age=259200,must-revalidate\r\nexpires: Thu, 04 Dec 2025 22:29:19 GMT\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\nvia: 1.1 varnish\r\nage: 16801\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1783\r\nx-timer: S1765422564.925773,VS0,VE0\r\ncontent-length: 249239\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":249239,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65252)","md5":"e1a20088d69fb3132fea6e5edea4c5e9","sha1":"3fd951fa7aefbef9cc11a3df08601f8a450fc689","sha256":"abb586d49f7c35602f5489751e328fddac3d3573211c1a1d06e7ab5c3554218a","sha512":"aa5a00aebd902aa4ef77e4510dbfa760e56c390ec26dce08ad635e046e0da6442eda6f4563bc19dab2f705f5209729859892c8529094189ccf5e81546d29abb4","ssdeep":"3072:h0Ji0SpajCAQErjIr6fNZPdzr6oQOETtdBjOUAIHN4lb:h07AajpQwIefNZPp6oQOCi","tlshash":"e234280f9a4d6d76078703e7f64b2da36bb040df53461c219eca4d4f11da78aa33ba58","first_seen":"2025-12-02T14:18:22.549509Z","last_seen":"2026-01-12T03:18:17.127572Z","times_seen":39,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/marketing_english-json.js?contenthash=3382aece6d8229926754","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:23.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/javascript/applications/store/marketing_english-json.js?contenthash=3382aece6d8229926754 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\nlast-modified: Tue, 09 Dec 2025 23:46:04 GMT\r\netag: \"I4pNxCzxInXe\"\r\ncache-control: public,max-age=259200,must-revalidate\r\nexpires: Fri, 12 Dec 2025 23:48:49 GMT\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\nvia: 1.1 varnish\r\nage: 98431\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 23054\r\nx-timer: S1765422564.940164,VS0,VE0\r\ncontent-length: 23720\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23720,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23556)","md5":"ea7147afc8007e737cf27890e2ab0d0b","sha1":"408908535546356f2c307121a894eac2f6ab90be","sha256":"9b95ff1749cf3b3d25de5d5bb72355b7caa21ed6c87c41af85174c0164bc64cb","sha512":"d9fa82cc388bb2f6fcd38849f28f0ed46919ad51f000380b100cb838461df04ae02307f8e533a66794275250b3d2bc981c0151c1fbdb813a5230262bcd176077","ssdeep":"384:+0YUHcvS/m+JAslpN+MhZxEOIqisxp9RO6orsH1XQSmRyeyZ/84t1SSzNQvIkoVS:MUHpm+blpNN7VMxsgE3kSd5/VQ472IeZ","tlshash":"e0b2a4b8f5376a2603cddee82dbefb0510bb80680748790c65645d2eb0f63d84a764f8","first_seen":"2025-12-10T12:22:30.004601Z","last_seen":"2026-01-05T18:17:44.165075Z","times_seen":31,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/prototype-1.7.js?v=npJElBnrEO6W\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/javascript/prototype-1.7.js?v=npJElBnrEO6W\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Sun, 18 May 2025 23:42:36 GMT\r\netag: \"npJElBnrEO6W\"\r\nx-integrity: \"sha384-YAoVVYkeHRpvvpvjRNZKi3AQxIO+hBZtpxGVOlZ4znfcRalb6uUpKX7XvCg9FgiS\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nage: 697967\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1807\r\nx-timer: S1765422562.352634,VS0,VE0\r\ncontent-length: 37134\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":163315,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"9e92449419eb10ee96c56d803d2baa43","sha1":"5a2be7055866b8f35bd852d466ff590251a56d89","sha256":"a655fc19da796630bcf37112ccf749898e98c99e1b25bccef0bf3573665195e5","sha512":"19d0c715d50abf41cccf0a96bf9c4673c5059d8a0a9edddc00c243ae44e403e1b3641c8e7c3e57b58746423b0679af216398648a6a1a4f50f394a9c15104fb32","ssdeep":"1536:Pe/hr8bCUSFPlpV7N+XS+st304cM9FmKZFDlYUo7pKMaV/6FzKKVA8MjjOH2X1Ix:PIr8bCBPlp0u9F6UodjaVbX1oYVpwxA8","tlshash":"99f3309c7de66035822bf13e5a9f418cf27980171408ed55b89c85a46fb0d3896fafec","first_seen":"2023-10-31T01:09:46Z","last_seen":"2026-04-16T10:23:02.314817Z","times_seen":2037,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":28,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/css/applications/store/main.css?v=aJPspEhMdgzn\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/css/applications/store/main.css?v=aJPspEhMdgzn\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"iq4uyeaUpBfX\"\r\nx-integrity: \"sha384-3c5ALlpOJBrAnCQTfoCCLq8ZLkHKqeOioLgVoO+soJwcjq7OhREYoT51WSccWoge\"\r\nlast-modified: Thu, 30 Apr 1970 05:59:49 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1765422562.352409,VS0,VE458\r\ncontent-length: 60928\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":217138,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (18954)","md5":"8aae2ec9e694a417d71a38d027ffa550","sha1":"f4ed6ecc14bda55366d57201c60d6b65f63f3518","sha256":"df694a6b410bbf03d5a04e43808fc3a09845e8360d10dae5d9b4b061cd620eb1","sha512":"04e8bcfdc7294d813f113b298334137725d4ee7effb49c993a4c4ecf445337f69ddd4a4556fd45231497c7c073d4858fd2ded9d9fbea665cfbb607bbbeae299e","ssdeep":"3072:J9N+sdx7+yDoDEu1m1YEpEOkqnKs54mb6lzFsv1o:J9N+ex7pu81YEl4mGlzyv2","tlshash":"c0244b2187453139b473c12aa9d16a4ebb38c007fa332abee56770a6c5cb2dd1737749","first_seen":"2025-12-11T03:09:59.410875Z","last_seen":"2025-12-17T07:40:39.941165Z","times_seen":8,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cloudflare.steamstatic.com/store//about/logo_steam.svg","fqdn":"cdn.cloudflare.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.77.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare.steamstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 14:20:08 GMT","end":"Mon, 09 Mar 2026 14:20:07 GMT"},"fingerprint":{"sha1":"ED:9D:46:12:D2:79:C2:D5:C8:6D:DA:23:45:31:13:25:00:98:38:58","sha256":"4D:1E:A6:18:77:55:7C:16:FE:5D:B4:8D:C9:94:BA:B1:17:6B:9F:57:79:ED:3E:21:19:C4:06:6D:55:96:43:30"}}},"request":{"raw":"GET /store//about/logo_steam.svg HTTP/1.1\r\nHost: cdn.cloudflare.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/svg+xml\r\ncontent-length: 2522\r\nlast-modified: Thu, 14 Nov 2024 00:19:00 GMT\r\netag: \"673541f4-9da\"\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-grn: 0.5d4d2417.1765422562.2b878695\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2522,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba1eadfd02abb260074971789870ce10","sha1":"e329edad609b0c2b7a567ff1964f59833d401c66","sha256":"9720a2b19519e0d51f44f91d7dd0cd57ccee7347efe38f5815acc6d984f79a8b","sha512":"063843a5043e832af172fc6609a288adb98bbb1da1fe82f8bb370c314b04748f5d50e2ed75400e8a653ef40761e64687a8eb99e8f4f613f879a109dcfffa7d22","ssdeep":"","tlshash":"de51f1150309ebfea9c90658962925c171d8dcefb074b0d0b7ff2817e15ccd0a68c6ea","first_seen":"2025-01-01T12:10:22.113504Z","last_seen":"2026-04-14T05:04:29.182157Z","times_seen":744,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":109,"dns":112,"connect":1,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/ico/ico_facebook.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/images/ico/ico_facebook.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 06 Dec 2023 00:00:29 GMT\r\netag: \"656fb99d-489\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nage: 9428\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 180\r\nx-timer: S1765422562.353275,VS0,VE0\r\ncontent-length: 1161\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"e406e5a22e4f3cfa580d3bb57420150e","sha1":"5b381e535bb0ce6003a461f3124fa1238dfbcedb","sha256":"760589f903c5e9bd169b38f941f9a3dc88a23897e9cc5b622d3d91f5c204b9e4","sha512":"e33cb7bd10104a1e8c2d3f2b3885d65ef3769f7250445c8341d6d2ad2367749ccdc48daabe4ea39cb80ee0362af9d01e48370db858ba01f956a1a6b8c04217c1","ssdeep":"","tlshash":"8f216355fab02a91b45cc9c22ce9c4178c470081f5e4f4babdcac4466c770fa42aa9cb","first_seen":"2023-12-07T16:24:37Z","last_seen":"2026-04-15T13:19:31.973857Z","times_seen":2329,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/css/v6/store.css?v=p1S4tSu2k8Oq\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/css/v6/store.css?v=p1S4tSu2k8Oq\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"1qFhqhx4suKR\"\r\nx-integrity: \"sha384-GjRAlo1fEMIftPWiPb17+LXnF8fXbCEGC2jLWtLdr488aJpZynzXP2lt7yYUCKN2\"\r\nlast-modified: Thu, 30 Apr 1970 05:59:49 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1765422562.357645,VS0,VE752\r\ncontent-length: 31200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":133181,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (391)","md5":"d6a161aa1c78b2e2918ba59d03c7d95a","sha1":"11bec64dea81af7c9b1a22b9878714b287cbfc74","sha256":"50d2f888ff0d1a8ae6a31d6a3c21888830fd5d184eab3b181abbd8a8680d8a84","sha512":"82c4e9751df0c3a9b6ad13f11afceb47721e0a6b627958d69bb654fb3e92688d0602c3de22ef132b34cd4f53d4b5794aa99bdd849115461c3da1626afd690a5b","ssdeep":"3072:8QA2u5+OzBzROQAD+Tlu2vVWF18tYtxtinqDyEbilRCZC6SeSH3ki/0Gzbhkj81J:8QA2uAOzBzROQAD+xu2vVWH8tYt3inqu","tlshash":"0cd3b7226b516445ba1ba0d8ff98eb55572f4083eb0e4eaab4f5746cd3c81c41273f8e","first_seen":"2025-11-06T19:07:49.185479Z","last_seen":"2025-12-17T07:11:33.319435Z","times_seen":31,"resource_available":false,"data":null}},"time_used":911,"timings":{"blocked":59,"dns":22,"connect":26,"send":0,"wait":765,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/images/responsive/header_logo.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/shared/images/responsive/header_logo.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:12 GMT\r\netag: \"649bb1f0-2a6f\"\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nage: 6613\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 110\r\nx-timer: S1765422562.353564,VS0,VE0\r\ncontent-length: 10863\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10863,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced","md5":"a4e79c73ee13cb25b60fc4b0ba1f690c","sha1":"b690c31b2eb1b0eb085e91aaae7e79f03debe7c1","sha256":"6cb869df089146c12efb5e9c968e911c314842624ba6f052a11346ac734cadc8","sha512":"aad423119f410a655f0aa475d2fe692087d7262c3986ce71347981c5b60f6a10031d7050bf9b9aee4e7d84d814f0b8883c964028fcbe14ed3464602f3ba6cec3","ssdeep":"192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM","tlshash":"4722c06cfcc0c875958352ba3e27fb7043f93e10c44b86b86960e5a5365c8f4959d137","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-04-16T10:23:02.322795Z","times_seen":6804,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/manifest.js?v=VWHoUUnZEI3s\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/javascript/applications/store/manifest.js?v=VWHoUUnZEI3s\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"QcTCQ0MlcVHj\"\r\nx-integrity: \"sha384-3vsVZGcA5rm116nS/f2+5mrzXKs/KCjD2BReIQfI8QPpY4rKKxB81htn+jTyes+M\"\r\nlast-modified: Thu, 30 Apr 1970 05:59:49 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1765422562.352482,VS0,VE151\r\ncontent-length: 11367\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23144,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (22981)","md5":"41c4c24343257151e33c698deef44821","sha1":"98b8c8d5c882870552789e4dde48029a139dc5aa","sha256":"b2d98ecb7f34eb9594a62002389f075f0722090e34b692042f3592af42cdc454","sha512":"3e043e3fc911f7b110e421f762b2a028eb7e27b0407f78ffa4ecf1a3702778281cd659123187d4db349eb9032264ad0117b7325464f64b7d250cc0f14c10935b","ssdeep":"384:+iBQyYo6hDqHwm/dIx+eE5NE1DExRaoP0mhzTVER3SQMHffQHQjEXcNUVb1/gP/Y:te/ZCwvmxTvhFEapY5b1/gP/bvRm","tlshash":"57a23a3dbf3cafcd297c29d76d9687a420842c1d6855448390edf36a0516b24bb12ebf","first_seen":"2025-12-10T12:22:30.027791Z","last_seen":"2025-12-11T03:09:59.414122Z","times_seen":2,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winter-gift.cfd/id=5947221648/","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-11T03:09:21.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winter-gift.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 17:14:50 GMT","end":"Sun, 08 Mar 2026 18:13:23 GMT"},"fingerprint":{"sha1":"41:4D:ED:CD:E7:DC:A2:BD:4D:E8:4F:E1:80:8C:48:0C:59:89:32:3D","sha256":"7E:90:54:AF:9B:E8:93:C6:30:9B:AA:48:5A:89:3E:B7:57:DC:84:8B:64:6D:95:36:92:16:34:2C:B7:27:CB:10"}}},"request":{"raw":"GET /id=5947221648/ HTTP/1.1\r\nHost: winter-gift.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DukuIS6e6ZG%2FuuCQNHjLSz8XAZ%2BKVjjP8uxhjra%2BncsVIGi2hy0dR%2F2F%2BNMkkgt6X3oKMU2wIIzolygZ93%2FTsMeV%2FnTl8Deyuzg1sqk%3D\"}]}\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nset-cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.SRokT2cCt4TZxi190zqfWR0e6_QJM4xf.r45pZHdmfrnGhFgF.WbPBsjZmzcgFfCqTa6MbfFjlcwcmHCMm-rkbJrVrGuQpV8O411qHRE60iTtv4tjogTaPQ81gp9OAbjup34Pxu9ZMLmLW_XPIe5HzeE2hUyG6-OJpBlOP5qYiSsD5F4bpv-gsMCxLXE5UehiaK5DePh6owgvxSkRcbVEJ6PszE8pwOIQNPfcIMTzznEml9dsXchQMwqxNvGnDBFbm9ss3Lnmzchlru9mWxYenrkqk6cxt39422Jk12A2-vqUK1icUf_Xtf0EXNEBQGQlGG1mmCmNcZDF7.kbVRcuesvYBiRNr2In6HWQ; Path=/; Expires=Thu, 11 Dec 2025 07:09:21 GMT; SameSite=Lax\ntoken=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODgsInNlY3JldCI6IjVlOTcwMzExMGRhMGI4NWM1NGZlNTkwNWNjNTRiMTkwIiwic2VydmljZSI6IlN0ZWFtIn0.U2w90vF_hNfGNWUkVeynDH8_yCXdSFWXp_yYo41Zwfk; Path=/; Expires=Thu, 11 Dec 2025 07:09:21 GMT; SameSite=Lax\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ac1c8640b630b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery UI:1.11.3","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Prototype:1.7","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"script.aculo.us","description":"","website":"https://script.aculo.us","common_platform_enumeration":"","icon":"script.aculo.us.png","categories":["JavaScript libraries"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":37916,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3584)","md5":"37524d0e7ea42c42ec70dc763b557f8e","sha1":"f6619e97cd07fd8791e0629608a9879d7892841f","sha256":"7d908f32802f14f13aa6728b3272ce3f8c0ce07f18470356726be15b53162275","sha512":"8271fcf819b28ac576eed077080b76da33e3c21304e35654bccd65af819ac300ba164220fbb11bef59005df11d77373a03953fe53de1fbb04d5cfe0448c3b369","ssdeep":"768:gPR4Otk+vD65IXEBueQLB5RnsRP8SZ343B8ElfxabUjVksHjZPIoK4CxtfCG05++:gPR4Otk+vD65IXEBueQLB5m8S343B/AI","tlshash":"0c036421a8f3c03b459ab1d5b1a75b3e66538b4bd5448f907bec02a4efd6bd24b2311c","first_seen":"2025-12-11T03:09:59.414901Z","last_seen":"2025-12-11T03:09:59.414901Z","times_seen":1,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":92,"dns":68,"connect":1,"send":0,"wait":145,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-11","alert":"Sinkholed","trigger":"winter-gift.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/auth_refresh.js?v=w6QbwI-5-j2S\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/shared/javascript/auth_refresh.js?v=w6QbwI-5-j2S\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Sun, 18 May 2025 23:42:36 GMT\r\netag: \"w6QbwI-5-j2S\"\r\nx-integrity: \"sha384-+yOq2N+bhO4ulh9z3oEznLvTUVM7Tf0YBJxKQmF+kQ05ZkraLoLO6oYmY8ebPw1B\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nage: 177987\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 3919\r\nx-timer: S1765422562.341934,VS0,VE0\r\ncontent-length: 677\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1527,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"c3a41bc08fb9fa3d925bfbde6930f313","sha1":"06bf235bae87234c3091962f40415b43492652e2","sha256":"8d764adbee3ffe7e61342a5b3be4c853c26c0a2c1e3eed1e63bb68cfee7944b0","sha512":"0ed874c12447dd3d84c745235d05c2b83ef47125f928aa87cf507a9189be1ff13a7f249ec207b09c5c64498991be4269039c18ff81bc26be92b78a5f4b6b1b55","ssdeep":"","tlshash":"6b31b9e09e8c0435137f009bbf2fbacd306e54725ed894a5bf05893a6c5830f97a5985","first_seen":"2024-11-16T08:41:12.910961Z","last_seen":"2026-04-16T10:23:02.344428Z","times_seen":1638,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/sales_english-json.js?contenthash=04e78d67ee20d3231eb2","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:23.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/javascript/applications/store/sales_english-json.js?contenthash=04e78d67ee20d3231eb2 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\nlast-modified: Tue, 09 Dec 2025 23:46:04 GMT\r\netag: \"BJ6_geCCU3nC\"\r\ncache-control: public,max-age=259200,must-revalidate\r\nexpires: Fri, 12 Dec 2025 23:48:49 GMT\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\nvia: 1.1 varnish\r\nage: 98431\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 23348\r\nx-timer: S1765422564.932151,VS0,VE0\r\ncontent-length: 211140\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":211140,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64906)","md5":"7afe30a39e22b12bfdff4506e2e8bc86","sha1":"1be1999c20ac42759d4cfe0db768389577f6faf3","sha256":"df0cc1dd9852631fab50c128f57eed12294d95cfe909b14d5a57d37214a41fd2","sha512":"6148215a5732d3a5fe302ab3de9b7d44b62bf92c75d47906a89b4b8a3e5291e37e46532d95586eab935dd4de2dac4c1a03775e7c1c4b3aaffec88e14a09413c8","ssdeep":"3072:xs4PKfx/onBTjIlCl02ArfKrxbJOggps5C:lmgnKlC4m5vQcC","tlshash":"6924551f56c003370b3b0695757db0c7b1748ca7a3c4a476aec7a139136ba19f1a6abc","first_seen":"2025-12-10T12:22:30.035734Z","last_seen":"2025-12-15T17:37:59.29201Z","times_seen":5,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamcommunity.com/favicon.ico","fqdn":"steamcommunity.com","domain":"steamcommunity.com","tld":"com"},"ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:24.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steampowered.com","organization":"Valve Corp"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:66:D7:D2:99:D6:A1:56:A5:A6:D9:94:5C:88:56:DD:5C:41:8E:49","sha256":"C5:81:A7:0E:F1:39:43:B6:7A:5C:E3:67:B5:C9:6C:8C:D4:AD:B1:96:E3:F0:6B:88:9F:83:D4:2D:94:97:36:7C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: steamcommunity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/x-icon\r\nCache-Control: public,max-age=86400\r\nExpires: Sun, 24 Nov 2024 12:35:58 GMT\r\nLast-Modified: Fri, 22 Nov 2024 18:31:38 GMT\r\nContent-Length: 38554\r\nDate: Thu, 11 Dec 2025 03:09:24 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38554,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"231913fdebabcbe65f4b0052372bde56","sha1":"553909d080e4f210b64dc73292f3a111d5a0781f","sha256":"9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad","sha512":"7b11b709968c5a52b9b60189fb534f5df56912417243820e9d1c00c97f4bd6d0835f2cdf574d0c36ecb32dbbf5fc397324df54f7fdf9e1b062b5dbda2c02e919","ssdeep":"768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh","tlshash":"70038de82e4917aee9e2cf324adb6716237b4f88c0bc169742b07f193175a51c6d78c1","first_seen":"2023-04-05T07:02:49Z","last_seen":"2026-04-16T10:23:02.380479Z","times_seen":6116,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":42,"connect":1,"send":0,"wait":9,"receive":2,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:23.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://winter-gift.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://store.fastly.steamstatic.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/octet-stream\r\nlast-modified: Wed, 28 Jun 2023 04:07:10 GMT\r\netag: \"649bb1ee-1df3c\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\nvia: 1.1 varnish\r\nage: 5217\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 11615\r\nx-timer: S1765422563.324785,VS0,VE0\r\ncontent-length: 122684\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":122684,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 22 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;MotivaSan","md5":"57613e143ff3dae10f282e84a066de28","sha1":"88756cc8c6db645b5f20aa17b14feefb4411c25f","sha256":"19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14","sha512":"94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176","ssdeep":"3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh","tlshash":"82c34b06f316e70aec614e3c66769399b358f8a53f2fcb0b95857d60bcad0d51e8128c","first_seen":"2023-04-05T04:16:14Z","last_seen":"2026-04-16T10:23:02.34745Z","times_seen":6549,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/css/v6/cart.css?v=SFGHVOgNiRXD\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/css/v6/cart.css?v=SFGHVOgNiRXD\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"euQrBjs3s0tL\"\r\nx-integrity: \"sha384-wwqls0qKcrTiGAXUGok5/hGuf48Cw+Rx15+/wJVxkw+N2HxA12xhKRH5Gn2Gw4pF\"\r\nlast-modified: Thu, 30 Apr 1970 05:59:49 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1765422562.369195,VS0,VE844\r\ncontent-length: 13977\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55188,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (361)","md5":"7ae42b063b37b34b4bbfa66ec1eca987","sha1":"0237e97323d63be63e41c2d6943306533bc57ccb","sha256":"128b112be145c79955013b264d4b0e23f6341564134aa50a9c81308e4e58d67c","sha512":"210fc97395f5e86190feba3e0a7b7c7ed2992ad46ac39a49e1511987baacb3c77902354a3818b1e4699abebcb05a5725079ebdd0b9bdebca2a0ea5ef2630f324","ssdeep":"1536:NQcX1bKOkMXsVhk5JF79Aj7qBf2FHTuVJlWeMu:NQcX1fX6k5JF79A3qBeFHTuVJlWeMu","tlshash":"7f4384176a112815b21f9899ff46fbd7572b8183af0f5ea6f8d0783cc3841e11267a8d","first_seen":"2025-10-10T17:43:41.079019Z","last_seen":"2026-02-08T22:20:33.190256Z","times_seen":40,"resource_available":false,"data":null}},"time_used":1017,"timings":{"blocked":66,"dns":17,"connect":32,"send":0,"wait":858,"receive":1,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=r6syZUh8_Rpk\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/shared/css/shared_responsive.css?v=r6syZUh8_Rpk\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"WVLOLXraD1WH\"\r\nx-integrity: \"sha384-Cq+Il5FutOTPBT746mkxqftuO1xGzv0mpaQtHrpFt0F0ebLghLAvrrMT7RD4OURi\"\r\nlast-modified: Thu, 30 Apr 1970 05:59:49 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 11 Dec 2025 03:09:23 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1765422562.341013,VS0,VE680\r\ncontent-length: 7127\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21369,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1673)","md5":"5952ce2d7ada0f5587ee6bf5048996fb","sha1":"094d877d957dc838f1876eeb118edd4e6a0af952","sha256":"1611c22bda893838ba6fa459bacb86eb7499f8bfed28d25e72b5456f13504a23","sha512":"f8af36fc53d3d7b6fef5e569fa66db94876039094ce7a2184de5d995bbfcfbdd88485b6828033909f25035bf21700b3ff5804a875ac94ff4016b0de4a6509d4e","ssdeep":"384:hl5qYb2mQXrN1gCYezhmVJzeQj/H6TKlojyl26iK:j5qFmQX5uCczeQjv6q2C","tlshash":"5da286176e20a102b30e7259fe569f25272f81597f0d8e5ab7b9316862c539d00e3bcf","first_seen":"2025-10-15T17:17:11.614385Z","last_seen":"2025-12-17T07:40:39.889036Z","times_seen":34,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":693,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:12 GMT\r\netag: \"649bb1f0-736\"\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1765422562.352273,VS0,VE561\r\ncontent-length: 1846\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1846,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced","md5":"574c350c7b23ae794d5276f8580e0838","sha1":"235c7b35c3468f8915eca01f7abdb43d34079609","sha256":"8b97ba0dac22fe6704c1f6d95fe79613f33017804f256abb9006df0442491787","sha512":"f1f2d7b6fa49e9241f2b88560127eb2871f66123c2f9de45b257750cf13e6ebb32a9d85d87aada6a99838a2f3c5412540065cbab398760a50f15aae3a759f9f7","ssdeep":"","tlshash":"7631d905eba0794086999ae271fb943bd9564095c7e07585b0cfdd294e704ac086d8cb","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-04-16T10:23:02.334954Z","times_seen":6326,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":584,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/account/redeem_wallet_complete_popup.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/images/account/redeem_wallet_complete_popup.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-57f1\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nage: 81677\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 316\r\nx-timer: S1765422562.353357,VS0,VE0\r\ncontent-length: 22513\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":22513,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 439 x 170, 8-bit/color RGBA, non-interlaced","md5":"4dddfe80ce9184f5fcb77a8735791e69","sha1":"475c4b22242ad7dcabf0e7f43e09b066d75b13af","sha256":"87682460ef234c5cdd98375eea1f03cc165947b3aea57deec37d552b32ba29ec","sha512":"ae6c464bda07b5fbb341a8adbf4353adba197186becdca15ae4821592b0f35176b4869b38c43084bee17547374a1834929ff760d8173721228df7027da39a464","ssdeep":"384:mXE05G0jCZQZ1CDMpbltRByo7gVKjb2gWH4vvrSvrrBcyWh0VrS9Hzo05HOxLECN:c35G7ZGCDIzBH3b2gWNTvlX4uDpD","tlshash":"6aa2d130d92cf1fc88cab803cc49b9e7667959bdddea3514625516df281cd0e33b6426","first_seen":"2023-05-21T20:35:46Z","last_seen":"2026-04-14T05:04:29.161833Z","times_seen":388,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/jdMmXeCQEkPbnFDy9T04NbgJ/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:24.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:20 GMT","end":"Mon, 16 Feb 2026 08:40:19 GMT"},"fingerprint":{"sha1":"6A:E1:8A:53:22:10:0A:EA:D5:8B:52:AB:88:89:E1:9C:72:AA:70:85","sha256":"F1:22:A3:0F:EE:FD:45:B1:E4:FA:14:E9:E4:1F:83:3A:81:45:61:0D:5D:82:48:E5:DB:D5:5F:95:60:4F:8F:DE"}}},"request":{"raw":"GET /recaptcha/releases/jdMmXeCQEkPbnFDy9T04NbgJ/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://winter-gift.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 361045\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 10 Dec 2025 01:15:43 GMT\r\nexpires: Thu, 10 Dec 2026 01:15:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 93221\r\nlast-modified: Fri, 28 Nov 2025 03:01:16 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":847558,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (582)","md5":"23469e83aa8d546accb43e858fe08b8c","sha1":"e178b613b0992dc1a1781940214b46cecfeb933a","sha256":"ce27cbb2e1e99239ac5b2d37767ab1d1f4fb184f220229bb30b1851dfbeca57b","sha512":"1969430b84574fafdfb47f888161ed779cfc6400bc3d6bda8d844cd68cf5c87389021223ec6999586e145583078a8fac14ebc86ec13c0ad61ee5b83d808e602e","ssdeep":"6144:lm0QhuwklgqrSTwPndCKqo0Jcnh+ep0t1mLve5NSRq+KELL22rS/YMTqiNe0vTAL:U9r0gdcacZ7LW3SRq+fryBNPo","tlshash":"fa0539ec7913b6e10372b8f59477a288733e9566d80c182eb09585f13fb4848b476eb7","first_seen":"2025-12-03T15:20:55.803944Z","last_seen":"2026-04-15T08:16:14.292535Z","times_seen":17074,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":77,"dns":0,"connect":15,"send":0,"wait":16,"receive":66,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=lz_99vci25ux\u0026l=english\u0026_cdn=fastly\u0026load=effects,controls,slider","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/javascript/scriptaculous/_combined.js?v=lz_99vci25ux\u0026l=english\u0026_cdn=fastly\u0026load=effects,controls,slider HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Sun, 18 May 2025 23:42:36 GMT\r\netag: \"lz_99vci25ux\"\r\nx-integrity: \"sha384-ypv8apRisCy5MbfVW/xJQC0n6ooV6krjmoShQQ8SJNZ3Q5Z+m92YpP2BXkzevTqz\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nage: 182934\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1801\r\nx-timer: S1765422562.352607,VS0,VE0\r\ncontent-length: 21131\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":87011,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"HTML document, ASCII text","md5":"973ffdf6f722db9bb1e350b4c673f365","sha1":"a6c7d4331056cd37569fac3ee5f4b4e0e09b38cb","sha256":"658b209483f3b09ceabfab105ce9f15078138d646ca0e9abee2033606c852b19","sha512":"28ec015dd5dd389a56008983d64c69fbedf4c091e4478c8cf25c34db310516bc8cd1e0804fb554e26dfffe9b724b24b91df8ee1a5ed68153bc6bead655de0311","ssdeep":"1536:Ek3m7kQD+mlspqh2NrFIei4f9wiIVWaLcrZmKw1wF/IS58H1nRtW460kfR+U:zr4gO4f9wiJucrZE1xUJ5P","tlshash":"8183850d37ab262580dbb06a5f5f454db238411b1806dc58b8ad83d48fa9f3861f7fb9","first_seen":"2024-12-13T15:16:33.754695Z","last_seen":"2026-04-14T05:04:29.178406Z","times_seen":1593,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":28,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=vNpZeOuePA4R\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 16:47:52 GMT","end":"Fri, 23 Jan 2026 16:47:51 GMT"},"fingerprint":{"sha1":"E6:0A:00:6A:07:46:79:2E:7E:61:7D:31:3A:67:97:E9:6C:3B:85:DC","sha256":"08:BA:BA:99:49:CC:60:C3:6B:FE:8D:AE:71:D1:37:D7:1D:70:47:46:35:41:4D:86:93:86:C4:89:BF:D6:07:6F"}}},"request":{"raw":"GET /public/javascript/applications/store/libraries~b28b7af69.js?v=vNpZeOuePA4R\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"L9JqUktT3bf9\"\r\nx-integrity: \"sha384-D8fNhdUTdlvajFZj5u01LxV8xDVhdLVqPYAuGDPJBP2HpMIwekexuyMOYLFyB2Ja\"\r\nlast-modified: Thu, 30 Apr 1970 05:59:49 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1765422562.352330,VS0,VE622\r\ncontent-length: 190815\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":648489,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65373)","md5":"2fd26a524b53ddb7fd3160dbfdd7a905","sha1":"d2e9577be43e40f63b8e468937af7adad3f73019","sha256":"a35500049162ba12b63ad8c01eaaea78dee3615c51ed513054fa82f78dc02c30","sha512":"71bb20ce9da7fb10f9cf0050cf6fdd384cdcc2bce508fda65d41ed20d43fe9482addeb01f296a5e35a5149c87d9487c1cb123794602f46cee404e07785812aa5","ssdeep":"6144:tfTer22Z/EfzmMMO9nvnOpsGq1y2Y/IU/Arf7myaU00M4P389w3Cq:8NMMAvnOpsGqeIU/ArDr00M08Nq","tlshash":"b2d43bc87561f41953a351b5146f100bb73a291a984c86e4f268ecda38f9d8ea13ff3d","first_seen":"2025-12-11T03:09:59.422178Z","last_seen":"2026-02-16T23:18:21.510654Z","times_seen":95,"resource_available":true,"data":null}},"time_used":659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":645,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2025-12-11","alert":"Hunting_JS_WebAssembly","trigger":"store.fastly.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=vNpZeOuePA4R\u0026l=english\u0026_cdn=fastly","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"winter-gift.cfd/711c77567d02525655103259165d760c5b520f02","fqdn":"winter-gift.cfd","domain":"winter-gift.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:22.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winter-gift.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 17:14:50 GMT","end":"Sun, 08 Mar 2026 18:13:23 GMT"},"fingerprint":{"sha1":"41:4D:ED:CD:E7:DC:A2:BD:4D:E8:4F:E1:80:8C:48:0C:59:89:32:3D","sha256":"7E:90:54:AF:9B:E8:93:C6:30:9B:AA:48:5A:89:3E:B7:57:DC:84:8B:64:6D:95:36:92:16:34:2C:B7:27:CB:10"}}},"request":{"raw":"GET /711c77567d02525655103259165d760c5b520f02 HTTP/1.1\r\nHost: winter-gift.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.SRokT2cCt4TZxi190zqfWR0e6_QJM4xf.r45pZHdmfrnGhFgF.WbPBsjZmzcgFfCqTa6MbfFjlcwcmHCMm-rkbJrVrGuQpV8O411qHRE60iTtv4tjogTaPQ81gp9OAbjup34Pxu9ZMLmLW_XPIe5HzeE2hUyG6-OJpBlOP5qYiSsD5F4bpv-gsMCxLXE5UehiaK5DePh6owgvxSkRcbVEJ6PszE8pwOIQNPfcIMTzznEml9dsXchQMwqxNvGnDBFbm9ss3Lnmzchlru9mWxYenrkqk6cxt39422Jk12A2-vqUK1icUf_Xtf0EXNEBQGQlGG1mmCmNcZDF7.kbVRcuesvYBiRNr2In6HWQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODgsInNlY3JldCI6IjVlOTcwMzExMGRhMGI4NWM1NGZlNTkwNWNjNTRiMTkwIiwic2VydmljZSI6IlN0ZWFtIn0.U2w90vF_hNfGNWUkVeynDH8_yCXdSFWXp_yYo41Zwfk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Dec 2025 03:09:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"121-P9p2aDNPXA4umZndUGAoHBBhyS0\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R4LZtBOVy2%2BjISkqlRt6PUlp3WTif9UGE7kv1psevjiTm83mNKhkoH2mximXdFMz6JU%2F1oAlPpdVJrGnD755npINC2xGZyAfMHTtCOsHCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ac1c8698a1e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":289,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e7b907be903f8082bde51c9fdef32705","sha1":"3fda7668334f5c0e2e9999dd5060281c1061c92d","sha256":"1c734ed46a94cf66991a202e0719bf410c5a25a3ae877f4c6e639ceebe605c24","sha512":"4e81083839c7a103300c8c56889371d14e83337acc89cacb05411eabd0c4b48e38d736f28c3362b2177b9753ac51613ec8e677e79da7529494466804910c1bee","ssdeep":"","tlshash":"7ed02b1204aca0abda005200445f3f0ad6bd1e6344c4bd1ea6bc4b32acfc6da385ad9f","first_seen":"2025-12-11T03:09:59.422949Z","last_seen":"2025-12-11T03:09:59.422949Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-11","alert":"Sinkholed","trigger":"winter-gift.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recaptcha.net/recaptcha/enterprise.js?render=explicit","fqdn":"recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winter-gift.cfd/id=5947221648/","date":"2025-12-11T03:09:24.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:07 GMT","end":"Mon, 19 Jan 2026 08:34:06 GMT"},"fingerprint":{"sha1":"16:F0:F2:6E:23:A1:95:F7:75:EA:70:AB:6F:D4:43:F3:BE:AA:FE:CD","sha256":"F0:41:ED:B6:DC:74:0C:CE:3C:DF:0C:20:73:B9:C1:3C:73:D4:E2:7D:2B:DC:30:F1:80:AE:20:7B:97:78:33:80"}}},"request":{"raw":"GET /recaptcha/enterprise.js?render=explicit HTTP/1.1\r\nHost: recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Thu, 11 Dec 2025 03:09:24 GMT\r\ndate: Thu, 11 Dec 2025 03:09:24 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1108,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1108), with no line terminators","md5":"cedd64750ef01510550b6ddcde6aeef6","sha1":"0bf900c81102dc24dd926599b9bd2a3e8be1322d","sha256":"ec56191574d54f8ca79744ac08c362eb2416cc25fbc3c5662220f52042f8036e","sha512":"0135a8e9c10a6014d7a4d9fb2754d9fc1f83ea3b196352c244f49e50c0b67e8022703865e1d4390a65ba6f75f3ea0b341adb0f518bb97c85e3dc25e01312e326","ssdeep":"","tlshash":"ed1100721719a07a0b7209e1d2fac771d491705cb16c4adc9256ea841eaaccfce06a95","first_seen":"2025-12-05T00:15:19.549018Z","last_seen":"2025-12-15T21:43:04.124401Z","times_seen":10,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":53,"dns":83,"connect":7,"send":0,"wait":21,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}