Edit tour

Windows Analysis Report
http://steamcomunity.aiq.ru/

Overview

General Information

Sample URL:	http://steamcomunity.aiq.ru/
Analysis ID:	1471866
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

HTML page contains string obfuscation

Drops PE files

Drops files with a non-matching file extension (content does not match file extension)

Form action URLs do not match main URL

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

None HTTPS page querying sensitive user data (password, username or email)

PE file contains an invalid checksum

PE file does not import any functions

PE file overlay found

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1856 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2304 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=2140,i,17805597807419333196,3159892843917487205,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5676 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5352 --field-trial-handle=2140,i,17805597807419333196,3159892843917487205,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6428 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://steamcomunity.aiq.ru/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://steamcomunity.aiq.ru/	Avira URL Cloud: detection malicious, Label: phishing
Source: http://steamcomunity.aiq.ru/	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

AI detected phishing page

Source: http://steamcomunity.aiq.ru

LLM: Score: 9 brands: Steam Reasons: The URL 'http://steamcomunity.aiq.ru' is highly suspicious. The legitimate domain for Steam Community is 'steamcommunity.com', not 'steamcomunity.aiq.ru'. The misspelling of 'community' as 'comunity' is a common phishing technique. The domain 'aiq.ru' is unrelated to Steam, which is another red flag. The webpage has a prominent login form, which is a common feature of phishing sites aiming to steal user credentials. Additionally, the banner at the top advertising a different service ('R3.ru') is unusual and suspicious. These elements strongly suggest that this is a phishing site. DOM: 0.0.pages.csv

HTML page contains string obfuscation

Source: https://steamcommunity.com/

HTTP Parser: $j=jquery.noconflict();.if(typeofjson!=object||!json.stringify||!json.parse){document.write(<scripttype=\text\/javascript\src=\https:\/\/community.akamai.steamstatic.com\/public\/javascript\/json2.js?v=pmscf4470ezp&l=english\><\/script>\n);};

Source: http://steamcomunity.aiq.ru/

HTTP Parser: Form action: http://steamcommunity.com/actions/Search aiq steamcommunity

Source: http://steamcomunity.aiq.ru/

HTTP Parser: Number of links: 0

Source: http://steamcomunity.aiq.ru/	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: http://www.r3.ru/	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: http://www.r3.ru/nedorogoy_hosting.php	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: http://www.r3.ru/	HTTP Parser: Title: R3. . PHP, MySQL, VDS, VPS. does not match URL
Source: http://www.r3.ru/nedorogoy_hosting.php	HTTP Parser: Title: R3.ru - , . does not match URL

Source: http://steamcomunity.aiq.ru/	HTTP Parser: Has password / email / username input fields
Source: http://www.r3.ru/	HTTP Parser: Has password / email / username input fields
Source: http://www.r3.ru/nedorogoy_hosting.php	HTTP Parser: Has password / email / username input fields

Source: http://steamcomunity.aiq.ru/

HTTP Parser: Form action: 654321.php

Source: http://steamcomunity.aiq.ru/	HTTP Parser: <input type="password" .../> found
Source: http://www.r3.ru/	HTTP Parser: <input type="password" .../> found
Source: http://www.r3.ru/nedorogoy_hosting.php	HTTP Parser: <input type="password" .../> found

Source: http://steamcomunity.aiq.ru/

HTTP Parser: No favicon

Source: http://steamcomunity.aiq.ru/	HTTP Parser: No <meta name="author".. found
Source: http://www.r3.ru/	HTTP Parser: No <meta name="author".. found
Source: http://www.r3.ru/nedorogoy_hosting.php	HTTP Parser: No <meta name="author".. found

Source: http://steamcomunity.aiq.ru/	HTTP Parser: No <meta name="copyright".. found
Source: http://www.r3.ru/	HTTP Parser: No <meta name="copyright".. found
Source: http://www.r3.ru/nedorogoy_hosting.php	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49771 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /public/css/skin_1/global.css HTTP/1.1Host: steamcommunity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://steamcomunity.aiq.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/skin_1/home.css HTTP/1.1Host: steamcommunity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://steamcomunity.aiq.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/skin_1/header.css HTTP/1.1Host: steamcommunity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://steamcomunity.aiq.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/global.js HTTP/1.1Host: steamcommunity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://steamcomunity.aiq.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/home.js HTTP/1.1Host: steamcommunity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://steamcomunity.aiq.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/buttonLogin.gif HTTP/1.1Host: steamcommunity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://steamcomunity.aiq.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/header/steamLogo.jpg HTTP/1.1Host: steamcommunity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://steamcomunity.aiq.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/header/steamText.jpg HTTP/1.1Host: steamcommunity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://steamcomunity.aiq.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/trans.gif HTTP/1.1Host: steamcommunity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://steamcomunity.aiq.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/homeBoxHalfBreak.gif HTTP/1.1Host: steamcommunity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://steamcomunity.aiq.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/footerLogo.gif HTTP/1.1Host: steamcommunity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://steamcomunity.aiq.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/global.js HTTP/1.1Host: steamcommunity.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/header/lowerBarBG.gif HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/homeBoxBG.gif HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/rightStatsBlockBG.gif HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/rightActionBlockBG.gif HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/rightStatsBlockFooter.gif HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/rightStatsBlockHeader.gif HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/homeMessaging/homeMessaging_07.jpg HTTP/1.1Host: steamcommunity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://steamcomunity.aiq.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/buttonLogin.gif HTTP/1.1Host: steamcommunity.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/header/steamLogo.jpg HTTP/1.1Host: steamcommunity.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/trans.gif HTTP/1.1Host: steamcommunity.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/homeBoxHalfBreak.gif HTTP/1.1Host: steamcommunity.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/header/steamText.jpg HTTP/1.1Host: steamcommunity.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/rightActionBlockHeader.gif HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/rightActionBlockFooter.gif HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/homeBoxBG.gif HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/header/lowerBarBG.gif HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/footerLogo.gif HTTP/1.1Host: steamcommunity.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/bulletArrow.gif HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/rightStatsBlockBG.gif HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/rightActionBlockBG.gif HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/rightStatsBlockFooter.gif HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/homeMessaging/homeMessaging_07.jpg HTTP/1.1Host: steamcommunity.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/rightStatsBlockHeader.gif HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/rightActionBlockFooter.gif HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/rightActionBlockHeader.gif HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/bulletArrow.gif HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /metrika/watch.js HTTP/1.1Host: mc.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.r3.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /metrika/watch.js HTTP/1.1Host: mc.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=tWSYlumyTirDLBdovJwlG8kvOG5alrZLD96H819nrBcgkwfzsfBXrdBcAtDh9lioFQNeNmqyQupg8bzUMLGvW7JwxcU=; yandexuid=227965331720736073; yashr=5422725291720736073
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_check HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.r3.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /metrika/advert.gif HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.r3.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_start?redirect_domain=mc.yandex.com&token=10427.V8h5q2aUXDU6yFOds8ztxFEHnQzHbqCRdqxUKBGJyjcpJ34wBf-N5sPKcGhYm7z9.epy37UHPSq_xZPsDU_IG5Mb6mAU%2C HTTP/1.1Host: mc.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.r3.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=tWSYlumyTirDLBdovJwlG8kvOG5alrZLD96H819nrBcgkwfzsfBXrdBcAtDh9lioFQNeNmqyQupg8bzUMLGvW7JwxcU=; yandexuid=227965331720736073; yashr=5422725291720736073
Source: global traffic	HTTP traffic detected: GET /watch/31156586?wmode=7&page-url=http%3A%2F%2Fwww.r3.ru%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A5hho8n2ksdla87onumn1dltjmj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1382%3Acn%3A1%3Adp%3A0%3Als%3A992410294446%3Ahid%3A637365453%3Az%3A-240%3Ai%3A20240711181433%3Aet%3A1720736074%3Ac%3A1%3Arn%3A206220827%3Arqn%3A1%3Au%3A1720736074913578627%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A6061%3Ads%3A0%2C8%2C750%2C427%2C3%2C0%2C%2C2348%2C2000%2C%2C%2C%2C3977%3Aco%3A0%3Acpf%3A1%3Antf%3A1%3Ans%3A1720736067165%3Arqnl%3A1%3Ast%3A1720736076%3At%3A%D0%A5%D0%BE%D1%81%D1%82%D0%B8%D0%BD%D0%B3%20%D0%BF%D1%80%D0%BE%D0%B2%D0%B0%D0%B9%D0%B4%D0%B5%D1%80%20R3.%20%D0%92%D0%B8%D1%80%D1%82%D1%83%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D1%85%D0%BE%D1%81%D1%82%D0%B8%D0%BD%D0%B3%20%D1%81%D0%B0%D0%B9%D1%82%D0%BE%D0%B2.%20%D0%9D%D0%B5%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%BE%D0%B9%20%D1%85%D0%BE%D1%81%D1%82%D0%B8%D0%BD%D0%B3%20PHP%2C%20MySQL%2C%20VDS%2C%20VPS.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(3179268)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: http://www.r3.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://www.r3.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /metrika/advert.gif HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=92723069fake; i=7AMaChKWYeQhEHJydxV5q6Il4bM9RZRhFZAqJnhgOdw4j9pcTTnRPca07m+/oA1SxFkLXM6WEysKcBn4vYov+CgyXk4=; yandexuid=5948601881720736076; yashr=5110826631720736076
Source: global traffic	HTTP traffic detected: GET /watch/31156586/1?wmode=7&page-url=http%3A%2F%2Fwww.r3.ru%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A5hho8n2ksdla87onumn1dltjmj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1382%3Acn%3A1%3Adp%3A0%3Als%3A992410294446%3Ahid%3A637365453%3Az%3A-240%3Ai%3A20240711181433%3Aet%3A1720736074%3Ac%3A1%3Arn%3A206220827%3Arqn%3A1%3Au%3A1720736074913578627%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A6061%3Ads%3A0%2C8%2C750%2C427%2C3%2C0%2C%2C2348%2C2000%2C%2C%2C%2C3977%3Aco%3A0%3Acpf%3A1%3Antf%3A1%3Ans%3A1720736067165%3Arqnl%3A1%3Ast%3A1720736076%3At%3A%D0%A5%D0%BE%D1%81%D1%82%D0%B8%D0%BD%D0%B3%20%D0%BF%D1%80%D0%BE%D0%B2%D0%B0%D0%B9%D0%B4%D0%B5%D1%80%20R3.%20%D0%92%D0%B8%D1%80%D1%82%D1%83%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D1%85%D0%BE%D1%81%D1%82%D0%B8%D0%BD%D0%B3%20%D1%81%D0%B0%D0%B9%D1%82%D0%BE%D0%B2.%20%D0%9D%D0%B5%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%BE%D0%B9%20%D1%85%D0%BE%D1%81%D1%82%D0%B8%D0%BD%D0%B3%20PHP%2C%20MySQL%2C%20VDS%2C%20VPS.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%283179268%29ti%281%29&redirnss=1 HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: http://www.r3.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://www.r3.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=92723069fake; yashr=5110826631720736076; yabs-sid=1766027471720736076; i=H7VfvyRlx3qmkklAfwPGNej1ue1Wa1I9kC+HxLAauB4PtuTHNKem6bnGwwqcuuwatpAwIN0Ek5IF2PJDFZ2+51Vja18=; yandexuid=3595307921720736076; yuidss=3595307921720736076; ymex=1752272076.yrts.1720736076#1752272076.yrtsi.1720736076; receive-cookie-deprecation=1; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3Mi
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_decide?token=10427.d-w_J4Swpnm_BntM2nUewua1BgZAnLHzqycwUSsGjyu7XieoNrY9mETHRXPGoJJNsQanARXtju9Z-U6ddpQMcOFj7DO_o3Im-rOkrkWpfs0AHJTaF1QDgf3nV8aYR7jhMZHWj2CKMEu_aimYiK3jUQJPa31HfH0WfQF0WPFxjY0iVac4aHvVMcoghUsOcYk6dvqfx_Kld_1yAg1X3ryvO6kvCyE6l2wdcjCyYQS38Sg%2C.Ze5sUsenJttYYZQJQ5PZLJslV-s%2C HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.r3.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=92723069fake; i=7AMaChKWYeQhEHJydxV5q6Il4bM9RZRhFZAqJnhgOdw4j9pcTTnRPca07m+/oA1SxFkLXM6WEysKcBn4vYov+CgyXk4=; yandexuid=5948601881720736076; yashr=5110826631720736076
Source: global traffic	HTTP traffic detected: GET /clmap/31156586?page-url=http%3A%2F%2Fwww.r3.ru%2F&pointer-click=rn%3A605633598%3Ax%3A18766%3Ay%3A12136%3At%3A36%3Ap%3AC%3BBA%7BAAA1%3AX%3A225%3AY%3A396&browser-info=u%3A1720736074913578627%3Av%3A1382%3Avf%3A5hho8n2ksdla87onumn1dltjmj%3Arqnl%3A1%3Ast%3A1720736078&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: http://www.r3.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://www.r3.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=92723069fake; yashr=5110826631720736076; yabs-sid=1766027471720736076; i=H7VfvyRlx3qmkklAfwPGNej1ue1Wa1I9kC+HxLAauB4PtuTHNKem6bnGwwqcuuwatpAwIN0Ek5IF2PJDFZ2+51Vja18=; yandexuid=3595307921720736076; yuidss=3595307921720736076; ymex=1752272076.yrts.1720736076#1752272076.yrtsi.1720736076; receive-cookie-deprecation=1; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3Mi
Source: global traffic	HTTP traffic detected: GET /watch/31156586/1?wmode=7&page-url=http%3A%2F%2Fwww.r3.ru%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A5hho8n2ksdla87onumn1dltjmj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1382%3Acn%3A1%3Adp%3A0%3Als%3A992410294446%3Ahid%3A637365453%3Az%3A-240%3Ai%3A20240711181433%3Aet%3A1720736074%3Ac%3A1%3Arn%3A206220827%3Arqn%3A1%3Au%3A1720736074913578627%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A6061%3Ads%3A0%2C8%2C750%2C427%2C3%2C0%2C%2C2348%2C2000%2C%2C%2C%2C3977%3Aco%3A0%3Acpf%3A1%3Antf%3A1%3Ans%3A1720736067165%3Arqnl%3A1%3Ast%3A1720736076%3At%3A%D0%A5%D0%BE%D1%81%D1%82%D0%B8%D0%BD%D0%B3%20%D0%BF%D1%80%D0%BE%D0%B2%D0%B0%D0%B9%D0%B4%D0%B5%D1%80%20R3.%20%D0%92%D0%B8%D1%80%D1%82%D1%83%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D1%85%D0%BE%D1%81%D1%82%D0%B8%D0%BD%D0%B3%20%D1%81%D0%B0%D0%B9%D1%82%D0%BE%D0%B2.%20%D0%9D%D0%B5%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%BE%D0%B9%20%D1%85%D0%BE%D1%81%D1%82%D0%B8%D0%BD%D0%B3%20PHP%2C%20MySQL%2C%20VDS%2C%20VPS.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%283179268%29ti%281%29&redirnss=1 HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=92723069fake; yashr=5110826631720736076; yabs-sid=1766027471720736076; i=H7VfvyRlx3qmkklAfwPGNej1ue1Wa1I9kC+HxLAauB4PtuTHNKem6bnGwwqcuuwatpAwIN0Ek5IF2PJDFZ2+51Vja18=; yandexuid=3595307921720736076; yuidss=3595307921720736076; ymex=1752272076.yrts.1720736076#1752272076.yrtsi.1720736076; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3Mi; _yasc=6WGaDMPp3sndeil8BGKfOtQSyeh0gDv2SPuRn/xzUZ6yEbH9g9qVPZ830QiIglIyFg==
Source: global traffic	HTTP traffic detected: GET /watch/31156586?wmode=7&page-url=http%3A%2F%2Fwww.r3.ru%2Fnedorogoy_hosting.php&page-ref=http%3A%2F%2Fwww.r3.ru%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A5hho8n2ksdla87onumn1dltjmj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1382%3Acn%3A1%3Adp%3A0%3Als%3A992410294446%3Ahid%3A137368756%3Az%3A-240%3Ai%3A20240711181438%3Aet%3A1720736078%3Ac%3A1%3Arn%3A331833279%3Arqn%3A2%3Au%3A1720736074913578627%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A399%3Ads%3A0%2C0%2C226%2C300%2C3%2C0%2C%2C5%2C2%2C%2C%2C%2C540%3Aco%3A0%3Acpf%3A1%3Antf%3A1%3Ans%3A1720736077648%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1720736078%3At%3A%D0%9D%D0%B5%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%BE%D0%B9%20%D1%85%D0%BE%D1%81%D1%82%D0%B8%D0%BD%D0%B3%20R3.ru%20-%20%D0%BE%D0%BF%D1%82%D0%B8%D0%BC%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B5%20%D1%82%D0%B0%D1%80%D0%B8%D1%84%D1%8B%20%D0%BF%D0%BB%D0%B0%D0%BD%D1%8B%20%D0%B4%D0%BB%D1%8F%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D1%8B%20%D1%81%D0%B0%D0%B9%D1%82%D0%BE%D0%B2%2C%20%D0%BF%D0%BE%D1%80%D1%82%D0%B0%D0%BB%D0%BE%D0%B2%20%D0%B8%20%D0%BC%D0%B0%D0%B3%D0%B0%D0%B7%D0%B8%D0%BD%D0%BE%D0%B2.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(0)cdl(na)eco(3179268)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: http://www.r3.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://www.r3.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=92723069fake; yashr=5110826631720736076; yabs-sid=1766027471720736076; receive-cookie-deprecation=1; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3Mi; yandexuid=227965331720736073; yuidss=227965331720736073; i=tWSYlumyTirDLBdovJwlG8kvOG5alrZLD96H819nrBcgkwfzsfBXrdBcAtDh9lioFQNeNmqyQupg8bzUMLGvW7JwxcU=; yp=1720822478.yu.5948601881720736076; ymex=1723328078.oyu.5948601881720736076; sync_cookie_ok=synced
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_decide?token=10427.d-w_J4Swpnm_BntM2nUewua1BgZAnLHzqycwUSsGjyu7XieoNrY9mETHRXPGoJJNsQanARXtju9Z-U6ddpQMcOFj7DO_o3Im-rOkrkWpfs0AHJTaF1QDgf3nV8aYR7jhMZHWj2CKMEu_aimYiK3jUQJPa31HfH0WfQF0WPFxjY0iVac4aHvVMcoghUsOcYk6dvqfx_Kld_1yAg1X3ryvO6kvCyE6l2wdcjCyYQS38Sg%2C.Ze5sUsenJttYYZQJQ5PZLJslV-s%2C HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=92723069fake; yashr=5110826631720736076; yabs-sid=1766027471720736076; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3Mi; _yasc=6WGaDMPp3sndeil8BGKfOtQSyeh0gDv2SPuRn/xzUZ6yEbH9g9qVPZ830QiIglIyFg==; yandexuid=227965331720736073; yuidss=227965331720736073; i=tWSYlumyTirDLBdovJwlG8kvOG5alrZLD96H819nrBcgkwfzsfBXrdBcAtDh9lioFQNeNmqyQupg8bzUMLGvW7JwxcU=; yp=1720822478.yu.5948601881720736076; ymex=1723328078.oyu.5948601881720736076; sync_cookie_ok=synced
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_check_secondary HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.r3.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=92723069fake; yashr=5110826631720736076; yabs-sid=1766027471720736076; i=H7VfvyRlx3qmkklAfwPGNej1ue1Wa1I9kC+HxLAauB4PtuTHNKem6bnGwwqcuuwatpAwIN0Ek5IF2PJDFZ2+51Vja18=; yandexuid=3595307921720736076; yuidss=3595307921720736076; ymex=1752272076.yrts.1720736076#1752272076.yrtsi.1720736076; receive-cookie-deprecation=1; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3Mi
Source: global traffic	HTTP traffic detected: GET /clmap/31156586?page-url=http%3A%2F%2Fwww.r3.ru%2F&pointer-click=rn%3A605633598%3Ax%3A18766%3Ay%3A12136%3At%3A36%3Ap%3AC%3BBA%7BAAA1%3AX%3A225%3AY%3A396&browser-info=u%3A1720736074913578627%3Av%3A1382%3Avf%3A5hho8n2ksdla87onumn1dltjmj%3Arqnl%3A1%3Ast%3A1720736078&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=92723069fake; yashr=5110826631720736076; yabs-sid=1766027471720736076; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3Mi; _yasc=6WGaDMPp3sndeil8BGKfOtQSyeh0gDv2SPuRn/xzUZ6yEbH9g9qVPZ830QiIglIyFg==; yandexuid=227965331720736073; yuidss=227965331720736073; i=tWSYlumyTirDLBdovJwlG8kvOG5alrZLD96H819nrBcgkwfzsfBXrdBcAtDh9lioFQNeNmqyQupg8bzUMLGvW7JwxcU=; yp=1720822478.yu.5948601881720736076; ymex=1723328078.oyu.5948601881720736076; sync_cookie_ok=synced
Source: global traffic	HTTP traffic detected: GET /watch/31156586?page-url=http%3A%2F%2Fwww.r3.ru%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A5hho8n2ksdla87onumn1dltjmj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1382%3Acn%3A1%3Adp%3A0%3Als%3A992410294446%3Ahid%3A637365453%3Az%3A-240%3Ai%3A20240711181433%3Aet%3A1720736074%3Ac%3A1%3Arn%3A206220827%3Arqn%3A1%3Au%3A1720736074913578627%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A6061%3Ads%3A0%2C8%2C750%2C427%2C3%2C0%2C%2C2348%2C2000%2C%2C%2C%2C3977%3Aco%3A0%3Acpf%3A1%3Antf%3A1%3Ans%3A1720736067165%3Arqnl%3A2%3Ast%3A1720736079%3At%3A%D0%A5%D0%BE%D1%81%D1%82%D0%B8%D0%BD%D0%B3%20%D0%BF%D1%80%D0%BE%D0%B2%D0%B0%D0%B9%D0%B4%D0%B5%D1%80%20R3.%20%D0%92%D0%B8%D1%80%D1%82%D1%83%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D1%85%D0%BE%D1%81%D1%82%D0%B8%D0%BD%D0%B3%20%D1%81%D0%B0%D0%B9%D1%82%D0%BE%D0%B2.%20%D0%9D%D0%B5%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%BE%D0%B9%20%D1%85%D0%BE%D1%81%D1%82%D0%B8%D0%BD%D0%B3%20PHP%2C%20MySQL%2C%20VDS%2C%20VPS.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(3179268)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: http://www.r3.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://www.r3.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=92723069fake; yashr=5110826631720736076; yabs-sid=1766027471720736076; receive-cookie-deprecation=1; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3Mi; yandexuid=227965331720736073; yuidss=227965331720736073; i=tWSYlumyTirDLBdovJwlG8kvOG5alrZLD96H819nrBcgkwfzsfBXrdBcAtDh9lioFQNeNmqyQupg8bzUMLGvW7JwxcU=; yp=1720822478.yu.5948601881720736076; sync_cookie_ok=synced; ymex=1723328078.oyu.5948601881720736076#1752272079.yrts.1720736079
Source: global traffic	HTTP traffic detected: GET /clmap/31156586?page-url=http%3A%2F%2Fwww.r3.ru%2F&pointer-click=rn%3A605633598%3Ax%3A18766%3Ay%3A12136%3At%3A36%3Ap%3AC%3BBA%7BAAA1%3AX%3A225%3AY%3A396&browser-info=u%3A1720736074913578627%3Av%3A1382%3Avf%3A5hho8n2ksdla87onumn1dltjmj%3Arqnl%3A2%3Ast%3A1720736079&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: http://www.r3.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://www.r3.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=92723069fake; yashr=5110826631720736076; yabs-sid=1766027471720736076; receive-cookie-deprecation=1; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3Mi; yandexuid=227965331720736073; yuidss=227965331720736073; i=tWSYlumyTirDLBdovJwlG8kvOG5alrZLD96H819nrBcgkwfzsfBXrdBcAtDh9lioFQNeNmqyQupg8bzUMLGvW7JwxcU=; yp=1720822478.yu.5948601881720736076; sync_cookie_ok=synced; ymex=1723328078.oyu.5948601881720736076#1752272079.yrts.1720736079
Source: global traffic	HTTP traffic detected: GET /watch/31156586?wmode=7&page-url=http%3A%2F%2Fwww.r3.ru%2Fnedorogoy_hosting.php&page-ref=http%3A%2F%2Fwww.r3.ru%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A5hho8n2ksdla87onumn1dltjmj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1382%3Acn%3A1%3Adp%3A0%3Als%3A992410294446%3Ahid%3A137368756%3Az%3A-240%3Ai%3A20240711181438%3Aet%3A1720736078%3Ac%3A1%3Arn%3A331833279%3Arqn%3A2%3Au%3A1720736074913578627%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A399%3Ads%3A0%2C0%2C226%2C300%2C3%2C0%2C%2C5%2C2%2C%2C%2C%2C540%3Aco%3A0%3Acpf%3A1%3Antf%3A1%3Ans%3A1720736077648%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1720736078%3At%3A%D0%9D%D0%B5%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%BE%D0%B9%20%D1%85%D0%BE%D1%81%D1%82%D0%B8%D0%BD%D0%B3%20R3.ru%20-%20%D0%BE%D0%BF%D1%82%D0%B8%D0%BC%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B5%20%D1%82%D0%B0%D1%80%D0%B8%D1%84%D1%8B%20%D0%BF%D0%BB%D0%B0%D0%BD%D1%8B%20%D0%B4%D0%BB%D1%8F%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D1%8B%20%D1%81%D0%B0%D0%B9%D1%82%D0%BE%D0%B2%2C%20%D0%BF%D0%BE%D1%80%D1%82%D0%B0%D0%BB%D0%BE%D0%B2%20%D0%B8%20%D0%BC%D0%B0%D0%B3%D0%B0%D0%B7%D0%B8%D0%BD%D0%BE%D0%B2.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(0)cdl(na)eco(3179268)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=92723069fake; yashr=5110826631720736076; yabs-sid=1766027471720736076; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3Mi; _yasc=6WGaDMPp3sndeil8BGKfOtQSyeh0gDv2SPuRn/xzUZ6yEbH9g9qVPZ830QiIglIyFg==; yandexuid=227965331720736073; yuidss=227965331720736073; i=tWSYlumyTirDLBdovJwlG8kvOG5alrZLD96H819nrBcgkwfzsfBXrdBcAtDh9lioFQNeNmqyQupg8bzUMLGvW7JwxcU=; sync_cookie_ok=synced; yp=1720822479.yu.227965331720736073; ymex=1723328079.oyu.227965331720736073
Source: global traffic	HTTP traffic detected: GET /watch/31156586?page-url=http%3A%2F%2Fwww.r3.ru%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A5hho8n2ksdla87onumn1dltjmj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1382%3Acn%3A1%3Adp%3A0%3Als%3A992410294446%3Ahid%3A637365453%3Az%3A-240%3Ai%3A20240711181433%3Aet%3A1720736074%3Ac%3A1%3Arn%3A206220827%3Arqn%3A1%3Au%3A1720736074913578627%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A6061%3Ads%3A0%2C8%2C750%2C427%2C3%2C0%2C%2C2348%2C2000%2C%2C%2C%2C3977%3Aco%3A0%3Acpf%3A1%3Antf%3A1%3Ans%3A1720736067165%3Arqnl%3A2%3Ast%3A1720736079%3At%3A%D0%A5%D0%BE%D1%81%D1%82%D0%B8%D0%BD%D0%B3%20%D0%BF%D1%80%D0%BE%D0%B2%D0%B0%D0%B9%D0%B4%D0%B5%D1%80%20R3.%20%D0%92%D0%B8%D1%80%D1%82%D1%83%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D1%85%D0%BE%D1%81%D1%82%D0%B8%D0%BD%D0%B3%20%D1%81%D0%B0%D0%B9%D1%82%D0%BE%D0%B2.%20%D0%9D%D0%B5%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%BE%D0%B9%20%D1%85%D0%BE%D1%81%D1%82%D0%B8%D0%BD%D0%B3%20PHP%2C%20MySQL%2C%20VDS%2C%20VPS.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(3179268)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=92723069fake; yashr=5110826631720736076; yabs-sid=1766027471720736076; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3Mi; _yasc=6WGaDMPp3sndeil8BGKfOtQSyeh0gDv2SPuRn/xzUZ6yEbH9g9qVPZ830QiIglIyFg==; yandexuid=227965331720736073; yuidss=227965331720736073; i=tWSYlumyTirDLBdovJwlG8kvOG5alrZLD96H819nrBcgkwfzsfBXrdBcAtDh9lioFQNeNmqyQupg8bzUMLGvW7JwxcU=; sync_cookie_ok=synced; yp=1720822479.yu.227965331720736073; ymex=1723328079.oyu.227965331720736073#1752272080.yrts.1720736080; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /clmap/31156586?page-url=http%3A%2F%2Fwww.r3.ru%2F&pointer-click=rn%3A605633598%3Ax%3A18766%3Ay%3A12136%3At%3A36%3Ap%3AC%3BBA%7BAAA1%3AX%3A225%3AY%3A396&browser-info=u%3A1720736074913578627%3Av%3A1382%3Avf%3A5hho8n2ksdla87onumn1dltjmj%3Arqnl%3A2%3Ast%3A1720736079&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=92723069fake; yashr=5110826631720736076; yabs-sid=1766027471720736076; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3Mi; _yasc=6WGaDMPp3sndeil8BGKfOtQSyeh0gDv2SPuRn/xzUZ6yEbH9g9qVPZ830QiIglIyFg==; yandexuid=227965331720736073; yuidss=227965331720736073; i=tWSYlumyTirDLBdovJwlG8kvOG5alrZLD96H819nrBcgkwfzsfBXrdBcAtDh9lioFQNeNmqyQupg8bzUMLGvW7JwxcU=; sync_cookie_ok=synced; yp=1720822479.yu.227965331720736073; ymex=1723328079.oyu.227965331720736073#1752272080.yrts.1720736080; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: steamcommunity.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=english HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/css/buttons.css?v=PUJIfhtcQn7W&l=english HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/css/shared_global.css?v=_D2Bg4UEaFxK&l=english HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/globalv2.css?v=PAcV2zMBzzSV&l=english HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/skin_1/fatalerror.css?v=wctRWaBvNt2z&l=english HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&l=english HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/prototype-1.7.js?v=.55t44gwuwgvw HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&load=effects,controls,slider,dragdrop HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/global.js?v=B7Vsdo1okyaC&l=english HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=english HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/global.js?v=B7Vsdo1okyaC&l=english HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/prototype-1.7.js?v=.55t44gwuwgvw HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&load=effects,controls,slider,dragdrop HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_logo.png HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/applications/community/main.css?v=bMmcHJyjU0h4&l=english HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/manifest.js?v=SoyOS782VWn_&l=english HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/libraries~b28b7af69.js?v=PnRvHG3Jx3hk&l=english HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=english HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/main.js?v=C9Ubouz1kosw&l=english HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/footerLogo_valve.png?v=1 HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_logo.png HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/manifest.js?v=SoyOS782VWn_&l=english HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/localization/shared_english-json.js?contenthash=23c54ca0a9e281dcbe77 HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/localization/sales_english-json.js?contenthash=78c2664709aeddc975e5 HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://steamcommunity.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://community.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/localization/main_english-json.js?contenthash=a853e1c988c9653cb341 HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/main.js?v=C9Ubouz1kosw&l=english HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/libraries~b28b7af69.js?v=PnRvHG3Jx3hk&l=english HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/footerLogo_valve.png?v=1 HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/localization/sales_english-json.js?contenthash=78c2664709aeddc975e5 HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/localization/shared_english-json.js?contenthash=23c54ca0a9e281dcbe77 HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/navevents.js?contenthash=3afb60572704da653a1f HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/localization/main_english-json.js?contenthash=a853e1c988c9653cb341 HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: steamcommunity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamcommunity.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=137b160e310eae12191d9e8a; timezoneOffset=-14400,0
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/navevents.js?contenthash=3afb60572704da653a1f HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: steamcommunity.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=137b160e310eae12191d9e8a; timezoneOffset=-14400,0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/css/shared_global.css?v=GJRG1UROmBaQ&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/v6/store.css?v=Em7-gccLNGfk&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/v6/home.css?v=2hZCzAnpfwUX&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/css/buttons.css?v=CrrkDubPqLcq&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/v6/creator_hub.css?v=e6oxFOI4knLo&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/css/shared_responsive.css?v=e-GD37z7aOe7&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/main.js?v=hD1etfEdoGz1&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/dynamicstore.js?v=fz6Sv1tbS3ZE&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/home.js?v=jmbY_L9K7LvX&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/cluster.js?v=zUvcVvp9xZmm&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/main.js?v=hD1etfEdoGz1&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/dynamicstore.js?v=fz6Sv1tbS3ZE&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/cluster.js?v=zUvcVvp9xZmm&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/steamdeck/steamdeck_promo_02.png?v=2%20alt= HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/colored_body_top.png?v=2 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=2hZCzAnpfwUX&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=GJRG1UROmBaQ&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_logo.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/applications/store/main.css?v=Mj5iVCqZtVbN&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/manifest.js?v=uCGpbhQNFUeY&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/libraries~b28b7af69.js?v=AHhPwUgMa8uV&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/main.js?v=rG4_KSXYnQCy&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images//gift/steamcards_promo_03.png?v=1 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/blank.gif HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_logo.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/colored_body_top.png?v=2 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/steamdeck/steamdeck_promo_02.png?v=2%20alt= HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/manifest.js?v=uCGpbhQNFUeY&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/mobile/ResponsiveChevron.svg HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/blank.gif HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images//gift/steamcards_promo_03.png?v=1 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images//v6/ico/ico_info.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/steamdeck/decklogo.png HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dynamicstore/saledata/?cc=US HTTP/1.1Host: store.steampowered.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: browserid=; sessionid=2ae83d25c63e8209f620b04c; timezoneOffset=-14400,0
Source: global traffic	HTTP traffic detected: GET /public/images/v6/home/cluster_bg.png?v=1 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=2hZCzAnpfwUX&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/arrows.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=2hZCzAnpfwUX&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/search_icon_btn.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=Em7-gccLNGfk&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/libraries~b28b7af69.js?v=AHhPwUgMa8uV&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/mobile/ResponsiveChevron.svg HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/main.js?v=rG4_KSXYnQCy&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/steamdeck/decklogo.png HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images//v6/ico/ico_info.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/arrows.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/search_icon_btn.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dynamicstore/saledata/?cc=US HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: browserid=; sessionid=2ae83d25c63e8209f620b04c; timezoneOffset=-14400,0
Source: global traffic	HTTP traffic detected: GET /public/images/v6/logo_steam_footer.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/footerLogo_valve_new.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/ico/ico_facebook.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/ico/ico_twitter.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/home/cluster_bg.png?v=1 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/logo_steam_footer.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=GJRG1UROmBaQ&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/home/background_spotlight.jpg HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=2hZCzAnpfwUX&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/home/logo_steam_piston.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=2hZCzAnpfwUX&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/footerLogo_valve_new.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/ico/ico_facebook.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/ico/ico_twitter.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/shared_english-json.js?contenthash=f0d83919e5371c11cc4f HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/sales_english-json.js?contenthash=2427041da1c36f76f959 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/main_english-json.js?contenthash=0f3e1311e60f860f0155 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/home/background_spotlight.jpg HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/marketing_english-json.js?contenthash=deef5c040fa6e28f22c9 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://store.steampowered.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/home/logo_steam_piston.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://store.steampowered.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Bold.ttf?v=4.015 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://store.steampowered.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Light.ttf?v=4.015 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://store.steampowered.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/sales_english-json.js?contenthash=2427041da1c36f76f959 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://store.steampowered.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/navevents.js?contenthash=a4eb1ee72718a7bf1c88 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IShoppingCartService/GetShoppingCartContents/v1?origin=https:%2F%2Fstore.steampowered.com&input_protobuf_encoded= HTTP/1.1Host: api.steampowered.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://store.steampowered.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/marketing_english-json.js?contenthash=deef5c040fa6e28f22c9 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/main_english-json.js?contenthash=0f3e1311e60f860f0155 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/navevents.js?contenthash=a4eb1ee72718a7bf1c88 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: store.steampowered.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: browserid=; sessionid=2ae83d25c63e8209f620b04c; timezoneOffset=-14400,0
Source: global traffic	HTTP traffic detected: GET /webvisor/31156586?wv-part=1&wv-check=23513&wv-type=0&wmode=0&wv-hit=137368756&page-url=http%3A%2F%2Fwww.r3.ru%2Fnedorogoy_hosting.php&rn=609505957&browser-info=et%3A1720736110%3Aw%3A1263x907%3Av%3A1382%3Az%3A-240%3Ai%3A20240711181509%3Au%3A1720736074913578627%3Avf%3A5hho8n2ksdla87onumn1dltjmj%3Ast%3A1720736110&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=92723069fake; yashr=5110826631720736076; yabs-sid=1766027471720736076; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3Mi; _yasc=6WGaDMPp3sndeil8BGKfOtQSyeh0gDv2SPuRn/xzUZ6yEbH9g9qVPZ830QiIglIyFg==; yandexuid=227965331720736073; yuidss=227965331720736073; i=tWSYlumyTirDLBdovJwlG8kvOG5alrZLD96H819nrBcgkwfzsfBXrdBcAtDh9lioFQNeNmqyQupg8bzUMLGvW7JwxcU=; sync_cookie_ok=synced; yp=1720822479.yu.227965331720736073; ymex=1723328079.oyu.227965331720736073#1752272080.yrts.1720736080; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /about/ HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: browserid=; sessionid=2ae83d25c63e8209f620b04c; timezoneOffset=-14400,0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: browserid=; sessionid=2ae83d25c63e8209f620b04c; timezoneOffset=-14400,0
Source: global traffic	HTTP traffic detected: GET /public/css/styles_about.css?v=i6LprAjCXlha&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/promo/newstore2016.css?v=Lv_hriLyrQ5z&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/slick/slick.css?v=ZSVHTEnT3WNW&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&l=english&load=effects,controls,slider HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/about.js?v=T9HhtJ81mJgN&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/main.js?v=hD1etfEdoGz1&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/dynamicstore.js?v=fz6Sv1tbS3ZE&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/slick/slick.js?v=.UvbXNQdQm-AJ HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/rellax/rellax.min.js?v=.KbIxshHXB6Um HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/videos/about_hero_loop_web.png HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/about.js?v=T9HhtJ81mJgN&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&l=english&load=effects,controls,slider HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store//about/logo_steam.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/rellax/rellax.min.js?v=.KbIxshHXB6Um HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-windows.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-macos.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-steamos.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-chromeos.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/slick/slick.js?v=.UvbXNQdQm-AJ HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_community.png HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_community_pt1.png HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store//about/logo_steam.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/videos/about_hero_loop_web.png HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-windows.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-macos.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IClientMetricsService/ReportClientError/v1 HTTP/1.1Host: api.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-steamos.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-chromeos.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_community_pt2.png HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_community_pt1.png HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_community.png HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_community_pt3.png HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_hardware.png HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_hardware_pt1.png?v=2 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_hardware_pt2.png?v=2 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_community_pt2.png HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_steamworks.png HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_steamworks_pt1.png HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_steamworks_pt2.png HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_community_pt3.png HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/shared_english-json.js?contenthash=f0d83919e5371c11cc4f HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=170383-170383If-Range: "JnZls8rzhlTG"
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Thin.ttf?v=4.015 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://store.steampowered.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/logo-steamworks.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-steamchat.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-gamehubs.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-broadcasts.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_steamworks_pt1.png HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_hardware_pt2.png?v=2 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_hardware.png HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_steamworks.png HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-steamworkshop.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_hardware_pt1.png?v=2 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-steammobile.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_steamworks_pt2.png HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/shared_english-json.js?contenthash=f0d83919e5371c11cc4f HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=170383-206419If-Range: "JnZls8rzhlTG"
Source: global traffic	HTTP traffic detected: GET /store/about/icon-earlyaccess.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-languages.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-payment.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-controllers.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/logo-steamworks.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/videos/about_hero_loop_web.webm HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://store.steampowered.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /store/about/icon-gamehubs.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-steamchat.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-broadcasts.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-steamworkshop.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-steammobile.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-controllers.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/shared_english-json.js?contenthash=f0d83919e5371c11cc4f HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-earlyaccess.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-languages.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-payment.svg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /news/ HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=2ae83d25c63e8209f620b04c; timezoneOffset=-14400,0; steamCountry=US%7Cd7fb65801182a5f50a3169fe2a0b7ef0; browserid=3704856794225445343
Source: global traffic	HTTP traffic detected: GET /public/css/v6/store.css?v=Faa1tVDQ0orR&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/v6/events_hub.css?v=Boj-JNQp8o1G&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/applications/store/2365.css?contenthash=a97f59753652ff682221 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/applications/store/9424.css?contenthash=65008c72e7e5586e0c2d HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/applications/store/6470.css?contenthash=987fa2cb54097ed0b59a HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/applications/store/chunk~0f0129d36.css?contenthash=35c9453fcd3c28e02be6 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/applications/store/chunk~25b223c3b.css?contenthash=78115f5da4a287049766 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/applications/store/chunk~618b6ee4b.css?contenthash=d6f19ddd805a1b54c9f7 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/applications/store/events.css?contenthash=aef462affd99465c09ab HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/460.js?contenthash=cdacaecab1945afa6c49 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/8015.js?contenthash=2df9e794677b4a9f62ad HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/9766.js?contenthash=15948c5efdc437742490 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/3398.js?contenthash=0b55af363e49f621e61c HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/8973.js?contenthash=3b5258e904ce4541e0df HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/7344.js?contenthash=249e38311c0b8052c50f HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/libraries~cd08905d3.js?contenthash=ab5e679e644ec5153027 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/460.js?contenthash=cdacaecab1945afa6c49 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/libraries~9050a80be.js?contenthash=de8a5c7d692a0d631fd4 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/8015.js?contenthash=2df9e794677b4a9f62ad HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/3398.js?contenthash=0b55af363e49f621e61c HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/libraries~25b223c3b.js?contenthash=588d8d7a7c29e3083f8d HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /about/?snr=1_2108_4__global-header HTTP/1.1Host: store.steampowered.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://store.steampowered.com/news/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=2ae83d25c63e8209f620b04c; timezoneOffset=-14400,0; steamCountry=US%7Cd7fb65801182a5f50a3169fe2a0b7ef0; browserid=3704856794225445343
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/9766.js?contenthash=15948c5efdc437742490 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/libraries~d055c6576.js?contenthash=c29aa74f6b45dc4c9b99 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/libraries~76eed14ef.js?contenthash=e24640adfcee4c0a0d0d HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/8973.js?contenthash=3b5258e904ce4541e0df HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/7344.js?contenthash=249e38311c0b8052c50f HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/slick/slick.js?v=.UvbXNQdQm-AJ HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/rellax/rellax.min.js?v=.KbIxshHXB6Um HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/libraries~0f0129d36.js?contenthash=ad058e4fce0ae57ec9a0 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/libraries~cd08905d3.js?contenthash=ab5e679e644ec5153027 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/libraries~e78445ea0.js?contenthash=f12d6afd120591a36394 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/libraries~25b223c3b.js?contenthash=588d8d7a7c29e3083f8d HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/libraries~9050a80be.js?contenthash=de8a5c7d692a0d631fd4 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/libraries~90d3fcf3a.js?contenthash=bf85ecccaea9f775c709 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/libraries~d055c6576.js?contenthash=c29aa74f6b45dc4c9b99 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/6882.js?contenthash=5d95b6913c0da291e28a HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/libraries~76eed14ef.js?contenthash=e24640adfcee4c0a0d0d HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/7247.js?contenthash=57b5e018f19671a05a6b HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/rellax/rellax.min.js?v=.KbIxshHXB6Um HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/9424.js?contenthash=207a8839b0299017be81 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/7695.js?contenthash=68684009631ce8314fef HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/5164.js?contenthash=7a251adb6773ab240567 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/2365.js?contenthash=f08e5c0c562137fe5a4a HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/5944.js?contenthash=e340f1b5c2f31f6c64f8 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/1915.js?contenthash=156d095ede4a92e54e2a HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/libraries~0f0129d36.js?contenthash=ad058e4fce0ae57ec9a0 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/slick/slick.js?v=.UvbXNQdQm-AJ HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/libraries~e78445ea0.js?contenthash=f12d6afd120591a36394 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/libraries~90d3fcf3a.js?contenthash=bf85ecccaea9f775c709 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/6882.js?contenthash=5d95b6913c0da291e28a HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/6470.js?contenthash=55994777822ffc0e7bd1 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/7247.js?contenthash=57b5e018f19671a05a6b HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/6520.js?contenthash=9d39d911c046a0484dce HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/chunk~25b223c3b.js?contenthash=23d7200d0114b53c4a07 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/3486.js?contenthash=cbc14682b82c0afc2d19 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/chunk~0f0129d36.js?contenthash=f391f1e910f19d14ad43 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/chunk~e78445ea0.js?contenthash=b3c7b227e9c6abe01426 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/9424.js?contenthash=207a8839b0299017be81 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/7695.js?contenthash=68684009631ce8314fef HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/5164.js?contenthash=7a251adb6773ab240567 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/2365.js?contenthash=f08e5c0c562137fe5a4a HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/installer/SteamSetup.exe HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/5944.js?contenthash=e340f1b5c2f31f6c64f8 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/1915.js?contenthash=156d095ede4a92e54e2a HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/6520.js?contenthash=9d39d911c046a0484dce HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/6470.js?contenthash=55994777822ffc0e7bd1 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/chunk~25b223c3b.js?contenthash=23d7200d0114b53c4a07 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/3486.js?contenthash=cbc14682b82c0afc2d19 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: steamcomunity.aiq.ruConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: steamcomunity.aiq.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://steamcomunity.aiq.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: steamcomunity.aiq.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.r3.ruConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inc/jquery.js HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inc/jquery.cookie.js HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /style/style.css HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inc/auth_ajax.js HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inc/message.js HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inc/site_heart.js HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/ajax-loader.gif HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inc/site_heart.js HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inc/jquery.cookie.js HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inc/message.js HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inc/jquery.js HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inc/auth_ajax.js HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/refresh_ico.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /style/grid.css HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.r3.ru/style/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/graph.svg HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/money.svg HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/data.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/ajax-loader.gif HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/refresh_ico.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/graph.svg HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/money.svg HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/all-host.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/data.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/brain-100.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/money-all.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/buck-up12.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/portf_right.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/isp-icons.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dr-web-spam.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/block2.jpg HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/style/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/offer.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/style/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/btn_orange.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/style/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/btn_green.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/style/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/visa-pay.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/r3-virt.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/style/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/vps-r3.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/style/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/ceo-r3.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/style/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/spec-r3.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/style/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/all-host.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: metrika_enabled=1
Source: global traffic	HTTP traffic detected: GET /images/portf_right.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/brain-100.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/money-all.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/dr-web-spam.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/buck-up12.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/panel-r3.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/style/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/sec-r3.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/style/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/isp-icons.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/offer.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/btn_orange.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/btn_green.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/tarif-r3.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/style/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/marker1.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/style/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/marker2.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/style/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/visa-pay.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/ceo-r3.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/marker3.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/style/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/spec-r3.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/block2.jpg HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/panel-r3.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/r3-virt.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/marker4.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/style/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/marker2.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/marker1.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/sec-r3.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/tarif-r3.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/marker3.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/marker4.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /images/vps-r3.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Source: global traffic	HTTP traffic detected: GET /nedorogoy_hosting.php HTTP/1.1Host: www.r3.ruConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://www.r3.ru/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /images/r3-host.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/nedorogoy_hosting.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /images/icon1.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/nedorogoy_hosting.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /images/icon_yes.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/nedorogoy_hosting.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /images/l2_wordpress-logo.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/nedorogoy_hosting.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /images/l2_joomla_logo.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/nedorogoy_hosting.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /images/l2_dle.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/nedorogoy_hosting.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /images/icon1.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /images/l2_druplicon.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/nedorogoy_hosting.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /images/icon_yes.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /images/l2_wordpress-logo.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /images/bitrix.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/nedorogoy_hosting.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /images/r3-hosting-circle.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/nedorogoy_hosting.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /images/r3-host.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /images/l2_dle.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /images/l2_druplicon.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /images/l2_joomla_logo.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.r3.ru/nedorogoy_hosting.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2; _ym_visorc=w
Source: global traffic	HTTP traffic detected: GET /images/r3-hosting-circle.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2; _ym_visorc=w
Source: global traffic	HTTP traffic detected: GET /images/bitrix.png HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2; _ym_visorc=w
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico HTTP/1.1Host: www.r3.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2; _ym_visorc=w
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: steamcommunity.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /about/ HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: timezoneOffset=-14400,0
Source: global traffic	HTTP traffic detected: GET /news/ HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: timezoneOffset=-14400,0

Source: chromecache_434.2.dr, chromecache_275.2.dr	String found in binary or memory:   <span aria-hidden="true">\|</span>  <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.facebook.com%2FSteam" target="_blank" rel=" noopener"><img src="https://store.akamai.steamstatic.com/public/images/ico/ico_facebook.png" alt="Facebook"> Steam</a> equals www.facebook.com (Facebook)
Source: chromecache_564.2.dr, chromecache_328.2.dr, chromecache_661.2.dr, chromecache_532.2.dr	String found in binary or memory: var youtubeurl = location.protocol + '//www.youtube.com/embed/' + videoid + '?showinfo=0&autohide=1&fs=1&hd=1&modestbranding=1&rel=0&showsearch=0&wmode=direct&autoplay=1'; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: steamcomunity.aiq.ru
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: community.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.r3.ru
Source: global traffic	DNS traffic detected: DNS query: widget.siteheart.com
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.com
Source: global traffic	DNS traffic detected: DNS query: store.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: store.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: cdn.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: shared.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: api.steampowered.com

Source: unknown

HTTP traffic detected: POST /watch/31156586/1?page-url=http%3A%2F%2Fwww.r3.ru%2Fnedorogoy_hosting.php&charset=utf-8&hittoken=1720736079_933160056a6210f81c43a415e2e55b0d4db31f41bf881cbcaadfce429cf4e9a4&browser-info=nb%3A1%3Acl%3A778%3Aar%3A1%3Avf%3A5hho8n2ksdla87onumn1dltjmj%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1382%3Acn%3A1%3Adp%3A0%3Als%3A992410294446%3Ahid%3A137368756%3Az%3A-240%3Ai%3A20240711181453%3Aet%3A1720736094%3Ac%3A1%3Arn%3A1043997400%3Arqn%3A3%3Au%3A1720736074913578627%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1343%2C1343%2C1%2C%3Aco%3A0%3Acpf%3A1%3Antf%3A1%3Aeu%3A2%3Ans%3A1720736077648%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1720736094&t=gdpr(14)clc(0-0-0)rqnt(2)lt(7600)aw(0)rcm(0)cdl(na)eco(3179268)dss(2)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D HTTP/1.1Host: mc.yandex.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: http://www.r3.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: http://www.r3.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=92723069fake; yashr=5110826631720736076; yabs-sid=1766027471720736076; receive-cookie-deprecation=1; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3Mi; yandexuid=227965331720736073; yuidss=227965331720736073; i=tWSYlumyTirDLBdovJwlG8kvOG5alrZLD96H819nrBcgkwfzsfBXrdBcAtDh9lioFQNeNmqyQupg8bzUMLGvW7JwxcU=; sync_cookie_ok=synced; yp=1720822479.yu.227965331720736073; ymex=1723328079.oyu.227965331720736073#1752272080.yrts.1720736080

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxContent-Type: text/html; charset=UTF-8Date: Thu, 11 Jul 2024 22:14:17 GMTContent-Length: 16Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: nginxContent-Type: text/html; charset=UTF-8X-Frame-Options: SAMEORIGINContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060 https://steamvideo-a.akamaihd.net/; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;Expires: Mon, 26 Jul 1997 05:00:00 GMTCache-Control: no-cacheContent-Encoding: gzipVary: Accept-EncodingContent-Length: 5476Date: Thu, 11 Jul 2024 22:14:43 GMTConnection: closeSet-Cookie: sessionid=137b160e310eae12191d9e8a; Path=/; Secure; SameSite=None

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=2140,i,17805597807419333196,3159892843917487205,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://steamcomunity.aiq.ru/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5352 --field-trial-handle=2140,i,17805597807419333196,3159892843917487205,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=2140,i,17805597807419333196,3159892843917487205,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5352 --field-trial-handle=2140,i,17805597807419333196,3159892843917487205,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 265960.crdownload	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 618	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\953f5050-3fe0-452b-afa6-006d607e6b4d.tmp	Jump to dropped file

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Software Packing	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Process Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Obfuscated Files or Information	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
http://steamcomunity.aiq.ru/	100%	Avira URL Cloud	phishing
http://steamcomunity.aiq.ru/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label	Link
C:\Users\user\Downloads\Unconfirmed 265960.crdownload	0%	ReversingLabs
Chrome Cache Entry: 618	0%	ReversingLabs

Source	Detection	Scanner	Label
https://store.akamai.steamstatic.com/public/javascript/applications/store/460.js?contenthash=cdacaecab1945afa6c49	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/store/about/videos/about_hero_loop_web.png	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/javascript/applications/store/9766.js?contenthash=15948c5efdc437742490	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/ico/ico-deck-unknown.svg	0%	Avira URL Cloud	safe
https://community.akamai.steamstatic.com/public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english	0%	Avira URL Cloud	safe
http://www.r3.ru/inc/site_heart.js	0%	Avira URL Cloud	safe
https://store.steampowered.com/?snr=1_4_4__join	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/javascript/applications/store/shared_english-json.js?contenthash=f0d83919e5371c11cc4f	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/css/v6/creator_hub.css?v=e6oxFOI4knLo&l=english	0%	Avira URL Cloud	safe
https://steamcommunity.com/chat/group/	0%	Avira URL Cloud	safe
https://community.akamai.steamstatic.com/public/images/skin_1/rightStatsBlockFooter.gif	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/javascript/applications/store/libraries~cd08905d3.js?contenthash=ab5e679e644ec5153027	0%	Avira URL Cloud	safe
http://www.r3.ru/images/data.png	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/store/steamdeck/decklogo.png	0%	Avira URL Cloud	safe
https://community.akamai.steamstatic.com/public/images/skin_1/iconholder_offline.jpg	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/store/about/icon-steamos.svg	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/community/levels_patterns_3-4.png?v=2	0%	Avira URL Cloud	safe
https://steamcommunity.com/news/shareonsteam/	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/javascript/home.js?v=jmbY_L9K7LvX&l=english	0%	Avira URL Cloud	safe
https://store.steampowered.com/category/adventure/?snr=1_4_4__12	0%	Avira URL Cloud	safe
https://store.steampowered.com/vr/?snr=1_4_4__125	0%	Avira URL Cloud	safe
http://www.r3.ru/images/marker3.png	0%	Avira URL Cloud	safe
https://steam.tv	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_1-2.png	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/store/about/icon-earlyaccess.svg	0%	Avira URL Cloud	safe
https://community.akamai.steamstatic.com/public/javascript/applications/community/main.js?v=C9Ubouz1kosw&l=english	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/community/levels_grunge_4.png?v=2	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/store/about/icon-broadcasts.svg	0%	Avira URL Cloud	safe
https://community.akamai.steamstatic.com/public/images/skin_1/btn_inactive_d_sides.png	0%	Avira URL Cloud	safe
http://www.r3.ru/images/l2_wordpress-logo.png	0%	Avira URL Cloud	safe
https://store.steampowered.com/vrhardware/?snr=1_4_4__12	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/community/levels_halftone_2.png?v=2	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/store/promo/newstore2016/homepage_long_01.jpg?v=1);	0%	Avira URL Cloud	safe
https://store.steampowered.com/category/action_tps/?snr=1_4_4__12	0%	Avira URL Cloud	safe
https://community.akamai.steamstatic.com/public/images/skin_1/btn_dgrey_ro_bg.png	0%	Avira URL Cloud	safe
http://www.r3.ru/images/vps-r3.png	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/friendindicator_small.png	0%	Avira URL Cloud	safe
https://steamcommunity.com/chat/	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/community/levels_hexagons.png	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/responsive/local_menu_hamburger.png	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/store/about/cta_hero_hardware_pt2.png?v=2	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/community/levels_space.png	0%	Avira URL Cloud	safe
https://community.akamai.steamstatic.com/public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/javascript/applications/store/5944.js?contenthash=e340f1b5c2f31f6c64f8	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/css/v6/home.css?v=2hZCzAnpfwUX&l=english	0%	Avira URL Cloud	safe
https://store.steampowered.com/app/1976950/Desktop_Dungeons_Rewind/?snr=1_4_4__43_3	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/ico/ico-deck-unsupported.svg	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/store/about/icon-steamworkshop.svg	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/community/levels_grunge_1.png?v=2	0%	Avira URL Cloud	safe
https://steamcommunity.com/public/images/skin_1/homeBoxHalfBreak.gif	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/store/about/cta_hero_community.png	0%	Avira URL Cloud	safe
https://store.steampowered.com/category/sports_team/?snr=1_4_4__12	0%	Avira URL Cloud	safe
https://steamcommunity.com/actions/SearchApps/	0%	Avira URL Cloud	safe
https://community.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0	0%	Avira URL Cloud	safe
https://store.steampowered.com/charts/steamdecktopplayed?snr=1_4_4__637	0%	Avira URL Cloud	safe
https://store.steampowered.com/points/shop/?snr=1_14_4__global-responsive-menu	0%	Avira URL Cloud	safe
https://shared.akamai.steamstatic.com/store_item_assets/steam/spotlights/7f429b0dfb6d11faadd5bdae/sp	0%	Avira URL Cloud	safe
https://store.steampowered.com/tags/en/Adventure/?snr=1_4_4__125	0%	Avira URL Cloud	safe
https://store.steampowered.com/favicon.ico	0%	Avira URL Cloud	safe
http://www.r3.ru/images/l2_joomla_logo.png	0%	Avira URL Cloud	safe
https://store.steampowered.com/category/horror/?snr=1_4_4__12	0%	Avira URL Cloud	safe
https://mc.yandex.com/clmap/31156586?page-url=http%3A%2F%2Fwww.r3.ru%2F&pointer-click=rn%3A605633598%3Ax%3A18766%3Ay%3A12136%3At%3A36%3Ap%3AC%3BBA%7BAAA1%3AX%3A225%3AY%3A396&browser-info=u%3A1720736074913578627%3Av%3A1382%3Avf%3A5hho8n2ksdla87onumn1dltjmj%3Arqnl%3A2%3Ast%3A1720736079&t=gdpr(14)ti(1)	0%	Avira URL Cloud	safe
https://store.steampowered.com/category/puzzle_matching/?snr=1_4_4__12	0%	Avira URL Cloud	safe
https://store.steampowered.com/curators/?snr=1_4_4__125	0%	Avira URL Cloud	safe
https://community.akamai.steamstatic.com/public/images/header/reportAbuseBG.gif	0%	Avira URL Cloud	safe
http://www.cakyra.ru	0%	Avira URL Cloud	safe
https://store.steampowered.com/?snr=1_4_4__login	0%	Avira URL Cloud	safe
http://www.r3.ru/images/brain-100.png	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/header/inbox_moderator_message.png	0%	Avira URL Cloud	safe
http://www.r3.ru/images/sec-r3.png	0%	Avira URL Cloud	safe
https://store.steampowered.com/category/survival/?snr=1_4_4__12	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015	0%	Avira URL Cloud	safe
https://community.akamai.steamstatic.com/public/images/header/maincol_bg_gray.png);	0%	Avira URL Cloud	safe
https://store.steampowered.com/category/tower_defense/?snr=1_4_4__12	0%	Avira URL Cloud	safe
https://steamcommunity.com/public/images/skin_1/footerLogo.gif	0%	Avira URL Cloud	safe
https://help.steampowered.com/en/	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=A	0%	Avira URL Cloud	safe
https://community.akamai.steamstatic.com/public/images/skin_1/bulletArrow.gif	0%	Avira URL Cloud	safe
https://store.steampowered.com/category/strategy/?snr=1_4_4__12	0%	Avira URL Cloud	safe
https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/1976950/header_alt_assets_0.jpg?t	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/store/about/cta_hero_steamworks_pt1.png	0%	Avira URL Cloud	safe
http://www.r3.ru/images/portf_right.png	0%	Avira URL Cloud	safe
https://store.steampowered.com/app/524220?snr=1_4_4__40_1	0%	Avira URL Cloud	safe
https://store.steampowered.com/category/strategy_card_board/?snr=1_4_4__12	0%	Avira URL Cloud	safe
http://diveintomark.org/)	0%	Avira URL Cloud	safe
https://store.steampowered.com/category/strategy_grand_4x/?snr=1_4_4__12	0%	Avira URL Cloud	safe
https://store.steampowered.com/newshub/?snr=1_4_4_	0%	Avira URL Cloud	safe
https://store.steampowered.com/search/?filter=topsellers&os=win&hidef2p=1&snr=1_4_4__tabsmore	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_3-4.png	0%	Avira URL Cloud	safe
https://store.steampowered.com/recommended/friendactivity/?snr=1_4_4__125	0%	Avira URL Cloud	safe
https://steamcommunity.com/workshop/ajaxfindworkshops/?searchText=	0%	Avira URL Cloud	safe
https://store.steampowered.com/category/sim_space_flight/?snr=1_4_4__12	0%	Avira URL Cloud	safe
https://community.akamai.steamstatic.com/public/images/skin_1/rightStatsBlockBG.gif	0%	Avira URL Cloud	safe
https://steamcommunity.com/public/css/skin_1/home.css	0%	Avira URL Cloud	safe
https://steamcommunity.com/public/images/header/steamLogo.jpg	0%	Avira URL Cloud	safe
https://store.steampowered.com/category/sim_hobby_sim/?snr=1_4_4__12	0%	Avira URL Cloud	safe
http://www.oriontransfer.co.nz	0%	Avira URL Cloud	safe
http://www.steampowered.com/steamworks/	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
steamcomunity.aiq.ru	212.46.196.133	true	true	unknown
mc.yandex.ru	87.250.251.119	true	false	unknown
steamcommunity.com	104.102.42.29	true	true	unknown
api.steampowered.com	104.102.42.29	true	false	unknown
store.steampowered.com	23.35.228.101	true	false	unknown
www.r3.ru	194.67.34.79	true	false	unknown
www.google.com	142.250.184.228	true	false	unknown
cdn.akamai.steamstatic.com	95.101.54.209	true	false	unknown
store.akamai.steamstatic.com	2.19.126.227	true	false	unknown
community.akamai.steamstatic.com	2.16.164.107	true	true	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
shared.akamai.steamstatic.com	unknown	unknown	false	unknown
mc.yandex.com	unknown	unknown	false	unknown
widget.siteheart.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://store.akamai.steamstatic.com/public/javascript/applications/store/9766.js?contenthash=15948c5efdc437742490	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/javascript/applications/store/460.js?contenthash=cdacaecab1945afa6c49	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/store/about/videos/about_hero_loop_web.png	false	Avira URL Cloud: safe	unknown
http://www.r3.ru/inc/site_heart.js	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/css/v6/creator_hub.css?v=e6oxFOI4knLo&l=english	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/javascript/applications/store/shared_english-json.js?contenthash=f0d83919e5371c11cc4f	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/images/skin_1/rightStatsBlockFooter.gif	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/store/about/icon-steamos.svg	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/javascript/applications/store/libraries~cd08905d3.js?contenthash=ab5e679e644ec5153027	false	Avira URL Cloud: safe	unknown
http://www.r3.ru/images/data.png	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/store/steamdeck/decklogo.png	false	Avira URL Cloud: safe	unknown
http://www.r3.ru/images/marker3.png	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/store/about/icon-broadcasts.svg	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/main.js?v=C9Ubouz1kosw&l=english	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/store/about/icon-earlyaccess.svg	false	Avira URL Cloud: safe	unknown
http://www.r3.ru/images/l2_wordpress-logo.png	false	Avira URL Cloud: safe	unknown
http://www.r3.ru/images/vps-r3.png	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/javascript/applications/store/5944.js?contenthash=e340f1b5c2f31f6c64f8	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/css/v6/home.css?v=2hZCzAnpfwUX&l=english	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/store/about/cta_hero_hardware_pt2.png?v=2	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/store/about/icon-steamworkshop.svg	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/store/about/cta_hero_community.png	false	Avira URL Cloud: safe	unknown
https://steamcommunity.com/public/images/skin_1/homeBoxHalfBreak.gif	true	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/favicon.ico	false	Avira URL Cloud: safe	unknown
http://www.r3.ru/images/l2_joomla_logo.png	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/clmap/31156586?page-url=http%3A%2F%2Fwww.r3.ru%2F&pointer-click=rn%3A605633598%3Ax%3A18766%3Ay%3A12136%3At%3A36%3Ap%3AC%3BBA%7BAAA1%3AX%3A225%3AY%3A396&browser-info=u%3A1720736074913578627%3Av%3A1382%3Avf%3A5hho8n2ksdla87onumn1dltjmj%3Arqnl%3A2%3Ast%3A1720736079&t=gdpr(14)ti(1)	false	Avira URL Cloud: safe	unknown
http://www.r3.ru/images/brain-100.png	false	Avira URL Cloud: safe	unknown
http://www.r3.ru/images/sec-r3.png	false	Avira URL Cloud: safe	unknown
https://steamcommunity.com/public/images/skin_1/footerLogo.gif	true	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/images/skin_1/bulletArrow.gif	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/store/about/cta_hero_steamworks_pt1.png	false	Avira URL Cloud: safe	unknown
http://www.r3.ru/images/portf_right.png	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/images/skin_1/rightStatsBlockBG.gif	false	Avira URL Cloud: safe	unknown
https://steamcommunity.com/public/images/header/steamLogo.jpg	true	Avira URL Cloud: safe	unknown
https://steamcommunity.com/public/css/skin_1/home.css	true	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://steamcommunity.com/chat/group/	chromecache_564.2.dr, chromecache_328.2.dr, chromecache_661.2.dr, chromecache_532.2.dr	true	Avira URL Cloud: safe	unknown
https://store.steampowered.com/?snr=1_4_4__join	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/ico/ico-deck-unknown.svg	chromecache_722.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_patterns_3-4.png?v=2	chromecache_722.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/category/adventure/?snr=1_4_4__12	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/images/skin_1/iconholder_offline.jpg	chromecache_627.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/javascript/home.js?v=jmbY_L9K7LvX&l=english	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://steamcommunity.com/news/shareonsteam/	chromecache_631.2.dr, chromecache_567.2.dr, chromecache_681.2.dr, chromecache_581.2.dr	true	Avira URL Cloud: safe	unknown
https://store.steampowered.com/vr/?snr=1_4_4__125	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://steam.tv	chromecache_303.2.dr, chromecache_633.2.dr, chromecache_318.2.dr, chromecache_348.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_1-2.png	chromecache_722.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_grunge_4.png?v=2	chromecache_722.2.dr	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/images/skin_1/btn_inactive_d_sides.png	chromecache_627.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_halftone_2.png?v=2	chromecache_722.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/vrhardware/?snr=1_4_4__12	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/store/promo/newstore2016/homepage_long_01.jpg?v=1);	chromecache_435.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/friendindicator_small.png	chromecache_722.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/category/action_tps/?snr=1_4_4__12	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/images/skin_1/btn_dgrey_ro_bg.png	chromecache_627.2.dr	false	Avira URL Cloud: safe	unknown
https://steamcommunity.com/chat/	chromecache_564.2.dr, chromecache_328.2.dr, chromecache_661.2.dr, chromecache_532.2.dr	true	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_hexagons.png	chromecache_722.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/responsive/local_menu_hamburger.png	chromecache_541.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/ico/ico-deck-unsupported.svg	chromecache_722.2.dr	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015	chromecache_281.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_space.png	chromecache_722.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/app/1976950/Desktop_Dungeons_Rewind/?snr=1_4_4__43_3	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_grunge_1.png?v=2	chromecache_722.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/points/shop/?snr=1_14_4__global-responsive-menu	chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/category/sports_team/?snr=1_4_4__12	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://shared.akamai.steamstatic.com/store_item_assets/steam/spotlights/7f429b0dfb6d11faadd5bdae/sp	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://steamcommunity.com/actions/SearchApps/	chromecache_631.2.dr, chromecache_567.2.dr, chromecache_681.2.dr, chromecache_581.2.dr	true	Avira URL Cloud: safe	unknown
https://store.steampowered.com/charts/steamdecktopplayed?snr=1_4_4__637	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/tags/en/Adventure/?snr=1_4_4__125	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/?snr=1_4_4__login	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/category/horror/?snr=1_4_4__12	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
http://www.cakyra.ru	chromecache_583.2.dr	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/images/header/reportAbuseBG.gif	chromecache_696.2.dr, chromecache_467.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/category/puzzle_matching/?snr=1_4_4__12	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/curators/?snr=1_4_4__125	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/header/inbox_moderator_message.png	chromecache_722.2.dr	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/images/header/maincol_bg_gray.png);	chromecache_696.2.dr, chromecache_467.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/category/survival/?snr=1_4_4__12	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/category/tower_defense/?snr=1_4_4__12	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://help.steampowered.com/en/	chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=A	chromecache_434.2.dr, chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/category/strategy/?snr=1_4_4__12	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/category/strategy_card_board/?snr=1_4_4__12	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/1976950/header_alt_assets_0.jpg?t	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/newshub/?snr=1_4_4__12	chromecache_434.2.dr	false		unknown
http://diveintomark.org/)	chromecache_315.2.dr, chromecache_529.2.dr, chromecache_584.2.dr, chromecache_688.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/app/524220?snr=1_4_4__40_1	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/category/strategy_grand_4x/?snr=1_4_4__12	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/newshub/?snr=1_4_4_	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/search/?filter=topsellers&os=win&hidef2p=1&snr=1_4_4__tabsmore	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_3-4.png	chromecache_722.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/recommended/friendactivity/?snr=1_4_4__125	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://steamcommunity.com/workshop/ajaxfindworkshops/?searchText=	chromecache_631.2.dr, chromecache_567.2.dr, chromecache_681.2.dr, chromecache_581.2.dr	true	Avira URL Cloud: safe	unknown
https://store.steampowered.com/category/sim_space_flight/?snr=1_4_4__12	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/category/sim_hobby_sim/?snr=1_4_4__12	chromecache_434.2.dr	false	Avira URL Cloud: safe	unknown
http://www.steampowered.com/steamworks/	chromecache_434.2.dr, chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
http://www.oriontransfer.co.nz	chromecache_315.2.dr, chromecache_584.2.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
2.16.164.107	community.akamai.steamstatic.com	European Union	20940	AKAMAI-ASN1EU	true
104.102.42.29	steamcommunity.com	United States	16625	AKAMAI-ASUS	true
2.16.202.86	unknown	European Union	16625	AKAMAI-ASUS	false
87.250.250.119	unknown	Russian Federation	13238	YANDEXRU	false
2.19.126.227	store.akamai.steamstatic.com	European Union	16625	AKAMAI-ASUS	false
93.158.134.119	unknown	Russian Federation	13238	YANDEXRU	false
23.197.127.21	unknown	United States	20940	AKAMAI-ASN1EU	false
95.101.54.113	unknown	European Union	34164	AKAMAI-LONGB	false
87.250.251.119	mc.yandex.ru	Russian Federation	13238	YANDEXRU	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
212.46.196.133	steamcomunity.aiq.ru	Russian Federation	3216	SOVAM-ASRU	true
2.19.126.218	unknown	European Union	16625	AKAMAI-ASUS	false
2.16.241.15	unknown	European Union	20940	AKAMAI-ASN1EU	false
95.101.54.209	cdn.akamai.steamstatic.com	European Union	34164	AKAMAI-LONGB	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
95.101.149.47	unknown	European Union	20940	AKAMAI-ASN1EU	false
2.16.241.11	unknown	European Union	20940	AKAMAI-ASN1EU	false
23.35.228.101	store.steampowered.com	United States	6461	ZAYO-6461US	false
194.67.34.79	www.r3.ru	Russian Federation	3216	SOVAM-ASRU	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1471866
Start date and time:	2024-07-12 00:13:15 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 52s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://steamcomunity.aiq.ru/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@28/751@64/23
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://www.r3.ru/ Browse: http://steamcommunity.com/ Browse: http://store.steampowered.com/ Browse: http://store.steampowered.com/about/ Browse: http://store.steampowered.com/news/

Input	Output
URL: http://steamcomunity.aiq.ru/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a login form which explicitly requests sensitive information such as a Steam username and login.","The text does not create a sense of urgency.","There is no CAPTCHA or anti-robot detection mechanism present on the webpage."]}
Title: Steam Community OCR: - XOCT11Hr caFlTaa 72p g a nonapaKl STEAM- Cafs is S t s SuUt Stats Search The Steam Community The Steam Community is comprised of who play all sorts of PC games. Now it's easy to find your friends online, organize groups, join chats, host matches and more. Best of all, it's free Steam username: Login You don't have to keep your comments to yourselg Join Steam for I lihe ponies. Take a quick tour of Steam &owse exisng groups Use The Steam Community to... Create your own profile page Create and join groups Easity see your friends onlile and in-game New to steam? Already have Steam? Schedule matches and events Review who you've played with lately Join Steam for free and purchase full retail You're just one step away from full-fledged Track gameplay stats versions of games delivered straight to your membership. Simply log in to and go Chat with groups desktop, complete with automatic updates to the community tab to access and set up Chat voice in-game or out and in-game community features. your profile page. Take a tour of Steam to learn more. @ 2009 Valve Corporation. All rights reserved. All trademarks are prom,' of their respective owners in the US and other countries
URL: http://steamcomunity.aiq.ru Model: gpt-4o	```json{ "phishing_score": 9, "brands": "Steam", "phishing": true, "suspicious_domain": true, "has_prominent_loginform": true, "has_captcha": false, "setechniques": true, "has_suspicious_link": true, "legitmate_domain": "steamcommunity.com", "reasons": "The URL 'http://steamcomunity.aiq.ru' is highly suspicious. The legitimate domain for Steam Community is 'steamcommunity.com', not 'steamcomunity.aiq.ru'. The misspelling of 'community' as 'comunity' is a common phishing technique. The domain 'aiq.ru' is unrelated to Steam, which is another red flag. The webpage has a prominent login form, which is a common feature of phishing sites aiming to steal user credentials. Additionally, the banner at the top advertising a different service ('R3.ru') is unusual and suspicious. These elements strongly suggest that this is a phishing site."}

URL: http://www.r3.ru/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form explicitly requesting sensitive information.","The text does not create a sense of urgency or interest.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: R3. . PHP, MySQL, VDS, VPS. OCR: VPS/VDS XocTHHr LIOMeHSl Pa3pa60TKa npoABHxeHHe noMOLub KOHTaKTbl BxoA nor/H naponb XOCTMHr Kaxaoro PermcTQauna 3a6blnM naponb? XOCTHHr XOCTHHr XOCTHHr XOCTHHr 80 120 220 310 py&lesi B Mecnq py&lesi B MecAL4 pylevi B MecAL\ py&levi B MecAL4 1 r6 Mecra 2 r6 Mecra 3 r6 Mecra 5 r6 Mecra 1 cahT 3 cahTa 5 cahTOB 10 caiTOB 1 MySQL 3 MySQL 5 6a3 MySQL 10 a3 MySQL npoBepMTb AOMeH: npoaepMTb domaimru Hawn npeMMYLuecTBa Pa60raeM c 2008 roma MoneyBack MOCKOBCKVILh maraueHTP XocTMHr R3.RLJ - 8 ner Ha pblHKe. B TegeHMe 30 AHe17, ecru-I Bac *TO-TO He Mbi Mcnonb3yeM KaHanbl KOMnaH1,U1 Sonee 9000 KmieHT0B. "ronaeH TeneK0M (BMnaL7H)" ycTp0b1T abl MoxeTe 0TKa3aTbCR OT ycnyr_ CYMMa nocTynMB1_ua Ha cqeT a Kagecrae Tpa$MK He pauennerc Ha poccM51CKMbi
URL: http://www.r3.ru/nedorogoy_hosting.php Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form explicitly requesting sensitive information.","The text does not create a sense of urgency or interest by using phrases such as 'Click here to view document' or 'To view secured document click here'.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: R3.ru - , . OCR: XocTHHr VPS/VDS LIOMeHSl Pa3pa60TKa npoABHxeHHe noMOLub KOHTaKTbl BxoA nor/H naponb XOCTMHr Ka>KAOro PermcTQauna 3a6blr1M naponb? Hemoporoi XOCTVIHr Ann Bcex! Haw Hemoporoi XOCTVIHr "AeanbH0 nOAXOAhT Ann pa3nhYHbtx rmnoB 06LUeCTBeHHSlX Be6-caiTOB, 4)0PYMOB, 6noros L4HTePHeT Mara3"HOB. XOCT"Hr Anq KaXA0ro BmpTyansHb1 XOCT"Hr http:// Tapb1@Hble nnaHbl C m1Tep051 "V" Ann pecypcoMKb1x cahToa VI KpynHblx npeAHa3HaqeHbl npocTblx CMS nopTanoB, paspa60TaHbl TapmcbHble nnaHbl (Wordpress, Joomla); a TaK xe XOCTMHra BMPTyarlbHoro XOCTMHra c rulTepo1 "P" Tapwl$bl Tapwcbbl caiToa He mcnonb3yi0U_WIX CMS 90% AaHHble -rapMcbbl TaK-xe peKOMeHAy0TCA Anm KnmeHToa, AaHHble Tapbl@bl onTW.1anbHbl M mx pa3MeLueH'1S TaKhX CMS KaK IC Bitrix. MaKcb1MYM MOU4HOCTM Ann aau_lero cahTa. H"1Koraa He npMATcA MeHATb. Taps-'#'1 Ha BhpTyansHs1vi XOCThHr Tapb1@Hb117 nnaH 120p 220p CTOMMOCTb a Mec gop 310p 510p 710p 108p 198p CTOMMOCTb a Mec (npbl onnaTe sa roA) 72p 279p 639p
URL: https://store.steampowered.com/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as there are no explicit requests for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency, as there are no phrases that encourage immediate action such as 'Click here to view document', 'To view secured document click here', or 'Open the link to see your invoice.'","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: Welcome to Steam OCR: I language 0 STEAM' Your Store New & Noteworthy Categories Points Shop News Labs search THE FIRST OESCENDANT NOW AVAILABLE FEATURED & RECOMMENDED STEAM DECK Your Games, Everywhere STEAM GIFT CARDS Give the Gift of Game RECOMMENDED By Friends
URL: https://store.steampowered.com/about/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as there are no explicit requests for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency or interest, as there are no calls to action such as 'Click here to view document', 'To view secured document click here', or 'Open the link to see your invoice'.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: Steam, The Ultimate Online Game Platform OCR: I language 0 STEAM' STORE COMMUNITY ABOUT SUPPORT O STEAM Steam is the ultimate destination for playing, discussing, and creating games. INSTALL STEAM 9 Also available on: LEARN MORE
URL: https://store.steampowered.com/about/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a login form which explicitly requests sensitive information such as a username.","There is no text in the provided webpage that creates a sense of urgency or interest.","There is no CAPTCHA or anti-robot detection mechanism present on the webpage."]}
Title: Steam, The Ultimate Online Game Platform OCR: login I language 0 STEAM' STORE COMMUNITY ABOUT SUPPORT O O STEAM Steam is the ultimate destination for playing, discussing, and creating games. INSTALL STEAM 9 Also available on: LEARN MORE
URL: https://store.steampowered.com/news/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The title 'Featured News - Steam News Hub' does not contain any keywords that would suggest a login form is present.","The text 'login I language 0 STEAM' STORE COMMUNITY ABOUT SUPPORT' does not contain any explicit requests for sensitive information, and therefore does not appear to contain a login form.","The text does not create a sense of urgency, as it does not contain phrases such as 'Click here to view document' or 'To view secured document click here'.","There is no evidence of a CAPTCHA or anti-robot detection mechanism in the provided text or title."]}
Title: Featured News - Steam News Hub OCR: login I language 0 STEAM' STORE COMMUNITY ABOUT SUPPORT
URL: https://store.steampowered.com Model: gpt-4o	```json{ "phishing_score": 0, "brands": "Steam", "phishing": false, "suspicious_domain": false, "has_prominent_loginform": false, "has_captcha": false, "setechniques": false, "has_suspicious_link": false, "legitmate_domain": "steampowered.com", "reasons": "The URL 'https://store.steampowered.com' is the legitimate domain for Steam, a well-known digital distribution platform. The webpage design and content match the official Steam website. There are no suspicious elements, social engineering techniques, or suspicious links present. The domain is not suspicious and matches the legitimate domain for Steam."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3771
Entropy (8bit):	5.650982822846273
Encrypted:	false
SSDEEP:	96:zlSPGBaf5e92QSN2bZQZ0VqC8b82GrJL8LEc:zlSPGBafM9Jh4bYlgLh
MD5:	5C6C4BFC6F22E354D61535F74F00CEB0
SHA1:	891B123BD213EBDFEFC1D22436AD79B1D63AAE21
SHA-256:	4261249A5BE324098B2E7AF944200FC09093067A6D0966120BA74B24D4B9DF27
SHA-512:	9829A9FE414CB4CB94DFA64CEF6A97123479FC3918ADF77CDF92BDF802DA0785C9F681D503022BF4BCFD1E9F4AE44A15671709D50C78C042ADA7BC1EC88EF970
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1..P...P...P.._...P...P..OP.._...P..s...P...V...P..Rich.P..........PE..L....c.W.................b...*.......3............@..........................`......>.$...@.......................................... ...0...........&$.h-...........................................................................................text...]a.......b.................. ..`.rdata...............f..............@..@.data...8............z..............@....ndata...p...............................rsrc....0... ...2..................@..@................................................................................................................................................................................................................................................................................................................................................................

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 12, 2024 00:14:14.589186907 CEST	192.168.2.4	1.1.1.1	0x2fa6	Standard query (0)	steamcomunity.aiq.ru	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:14.589379072 CEST	192.168.2.4	1.1.1.1	0x47cc	Standard query (0)	steamcomunity.aiq.ru	65	IN (0x0001)	false
Jul 12, 2024 00:14:16.009316921 CEST	192.168.2.4	1.1.1.1	0x1165	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:16.009480953 CEST	192.168.2.4	1.1.1.1	0x63c7	Standard query (0)	steamcommunity.com	65	IN (0x0001)	false
Jul 12, 2024 00:14:17.467375040 CEST	192.168.2.4	1.1.1.1	0x57f8	Standard query (0)	community.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:17.467905045 CEST	192.168.2.4	1.1.1.1	0x1961	Standard query (0)	community.akamai.steamstatic.com	65	IN (0x0001)	false
Jul 12, 2024 00:14:17.469412088 CEST	192.168.2.4	1.1.1.1	0x1d03	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:17.470328093 CEST	192.168.2.4	1.1.1.1	0x20dc	Standard query (0)	steamcommunity.com	65	IN (0x0001)	false
Jul 12, 2024 00:14:18.168054104 CEST	192.168.2.4	1.1.1.1	0xe720	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:18.169886112 CEST	192.168.2.4	1.1.1.1	0xaac0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 12, 2024 00:14:18.485615969 CEST	192.168.2.4	1.1.1.1	0xe16e	Standard query (0)	community.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:18.486176968 CEST	192.168.2.4	1.1.1.1	0xdd5e	Standard query (0)	community.akamai.steamstatic.com	65	IN (0x0001)	false
Jul 12, 2024 00:14:21.885099888 CEST	192.168.2.4	1.1.1.1	0x5d3c	Standard query (0)	steamcomunity.aiq.ru	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:21.885468960 CEST	192.168.2.4	1.1.1.1	0x9dab	Standard query (0)	steamcomunity.aiq.ru	65	IN (0x0001)	false
Jul 12, 2024 00:14:27.677864075 CEST	192.168.2.4	1.1.1.1	0x617a	Standard query (0)	www.r3.ru	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:27.678915977 CEST	192.168.2.4	1.1.1.1	0x512e	Standard query (0)	www.r3.ru	65	IN (0x0001)	false
Jul 12, 2024 00:14:29.755894899 CEST	192.168.2.4	1.1.1.1	0xc0a8	Standard query (0)	www.r3.ru	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:29.756119967 CEST	192.168.2.4	1.1.1.1	0x10c2	Standard query (0)	www.r3.ru	65	IN (0x0001)	false
Jul 12, 2024 00:14:32.167289972 CEST	192.168.2.4	1.1.1.1	0xe2da	Standard query (0)	widget.siteheart.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:32.167701960 CEST	192.168.2.4	1.1.1.1	0x42fa	Standard query (0)	widget.siteheart.com	65	IN (0x0001)	false
Jul 12, 2024 00:14:32.173165083 CEST	192.168.2.4	1.1.1.1	0xac9f	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:32.173640013 CEST	192.168.2.4	1.1.1.1	0x2747	Standard query (0)	mc.yandex.ru	65	IN (0x0001)	false
Jul 12, 2024 00:14:32.495559931 CEST	192.168.2.4	1.1.1.1	0x3f6b	Standard query (0)	widget.siteheart.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:34.527616978 CEST	192.168.2.4	1.1.1.1	0x89ce	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:34.528018951 CEST	192.168.2.4	1.1.1.1	0x1784	Standard query (0)	mc.yandex.ru	65	IN (0x0001)	false
Jul 12, 2024 00:14:35.134960890 CEST	192.168.2.4	1.1.1.1	0xdf61	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:35.135210991 CEST	192.168.2.4	1.1.1.1	0xe1b9	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
Jul 12, 2024 00:14:36.431624889 CEST	192.168.2.4	1.1.1.1	0x866e	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:36.431780100 CEST	192.168.2.4	1.1.1.1	0xc020	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
Jul 12, 2024 00:14:38.434942007 CEST	192.168.2.4	1.1.1.1	0x8c93	Standard query (0)	widget.siteheart.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:38.435087919 CEST	192.168.2.4	1.1.1.1	0x9ac1	Standard query (0)	widget.siteheart.com	65	IN (0x0001)	false
Jul 12, 2024 00:14:38.445385933 CEST	192.168.2.4	1.1.1.1	0xd226	Standard query (0)	widget.siteheart.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:41.669471025 CEST	192.168.2.4	1.1.1.1	0x655e	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:41.669610977 CEST	192.168.2.4	1.1.1.1	0xe672	Standard query (0)	steamcommunity.com	65	IN (0x0001)	false
Jul 12, 2024 00:14:42.334364891 CEST	192.168.2.4	1.1.1.1	0xb216	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:42.334515095 CEST	192.168.2.4	1.1.1.1	0xd87a	Standard query (0)	steamcommunity.com	65	IN (0x0001)	false
Jul 12, 2024 00:14:43.500627995 CEST	192.168.2.4	1.1.1.1	0xe34f	Standard query (0)	community.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:43.500783920 CEST	192.168.2.4	1.1.1.1	0xae9d	Standard query (0)	community.akamai.steamstatic.com	65	IN (0x0001)	false
Jul 12, 2024 00:14:53.664453983 CEST	192.168.2.4	1.1.1.1	0x8ae2	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:53.664453983 CEST	192.168.2.4	1.1.1.1	0x2dac	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
Jul 12, 2024 00:14:54.462763071 CEST	192.168.2.4	1.1.1.1	0x6876	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:54.462893009 CEST	192.168.2.4	1.1.1.1	0x6180	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
Jul 12, 2024 00:14:56.502966881 CEST	192.168.2.4	1.1.1.1	0xc392	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:56.503700018 CEST	192.168.2.4	1.1.1.1	0x589f	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
Jul 12, 2024 00:14:58.522921085 CEST	192.168.2.4	1.1.1.1	0x6f71	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:58.523168087 CEST	192.168.2.4	1.1.1.1	0x626b	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
Jul 12, 2024 00:15:01.184264898 CEST	192.168.2.4	1.1.1.1	0xd3f7	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:01.184740067 CEST	192.168.2.4	1.1.1.1	0x3e43	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
Jul 12, 2024 00:15:01.188167095 CEST	192.168.2.4	1.1.1.1	0xb3b	Standard query (0)	shared.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:01.188535929 CEST	192.168.2.4	1.1.1.1	0x1d84	Standard query (0)	shared.akamai.steamstatic.com	65	IN (0x0001)	false
Jul 12, 2024 00:15:02.505703926 CEST	192.168.2.4	1.1.1.1	0xe82b	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:02.506087065 CEST	192.168.2.4	1.1.1.1	0x2fc1	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
Jul 12, 2024 00:15:02.509526968 CEST	192.168.2.4	1.1.1.1	0xffe2	Standard query (0)	shared.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:02.510123014 CEST	192.168.2.4	1.1.1.1	0xf07f	Standard query (0)	shared.akamai.steamstatic.com	65	IN (0x0001)	false
Jul 12, 2024 00:15:06.680738926 CEST	192.168.2.4	1.1.1.1	0x184c	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:06.680912971 CEST	192.168.2.4	1.1.1.1	0xbd20	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
Jul 12, 2024 00:15:06.818804979 CEST	192.168.2.4	1.1.1.1	0x71b6	Standard query (0)	widget.siteheart.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:10.196125984 CEST	192.168.2.4	1.1.1.1	0x20cc	Standard query (0)	api.steampowered.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:10.196261883 CEST	192.168.2.4	1.1.1.1	0x9fb7	Standard query (0)	api.steampowered.com	65	IN (0x0001)	false
Jul 12, 2024 00:15:18.562489033 CEST	192.168.2.4	1.1.1.1	0x1465	Standard query (0)	api.steampowered.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:18.563338995 CEST	192.168.2.4	1.1.1.1	0x7bd8	Standard query (0)	api.steampowered.com	65	IN (0x0001)	false
Jul 12, 2024 00:15:26.233634949 CEST	192.168.2.4	1.1.1.1	0x97d3	Standard query (0)	widget.siteheart.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:36.232219934 CEST	192.168.2.4	1.1.1.1	0x7d66	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:36.232367992 CEST	192.168.2.4	1.1.1.1	0xdf83	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 12, 2024 00:14:14.979449034 CEST	1.1.1.1	192.168.2.4	0x2fa6	No error (0)	steamcomunity.aiq.ru		212.46.196.133	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:16.019777060 CEST	1.1.1.1	192.168.2.4	0x1165	No error (0)	steamcommunity.com		104.102.42.29	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:17.478610039 CEST	1.1.1.1	192.168.2.4	0x57f8	No error (0)	community.akamai.steamstatic.com		2.16.164.107	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:17.478610039 CEST	1.1.1.1	192.168.2.4	0x57f8	No error (0)	community.akamai.steamstatic.com		2.16.164.128	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:17.479581118 CEST	1.1.1.1	192.168.2.4	0x1d03	No error (0)	steamcommunity.com		104.102.42.29	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:18.178071022 CEST	1.1.1.1	192.168.2.4	0xe720	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:18.179351091 CEST	1.1.1.1	192.168.2.4	0xaac0	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 12, 2024 00:14:18.690907955 CEST	1.1.1.1	192.168.2.4	0xe16e	No error (0)	community.akamai.steamstatic.com		2.16.241.15	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:18.690907955 CEST	1.1.1.1	192.168.2.4	0xe16e	No error (0)	community.akamai.steamstatic.com		2.16.241.4	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:22.188178062 CEST	1.1.1.1	192.168.2.4	0x5d3c	No error (0)	steamcomunity.aiq.ru		212.46.196.133	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:28.037512064 CEST	1.1.1.1	192.168.2.4	0x617a	No error (0)	www.r3.ru		194.67.34.79	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:29.178070068 CEST	1.1.1.1	192.168.2.4	0x262f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 12, 2024 00:14:29.178070068 CEST	1.1.1.1	192.168.2.4	0x262f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:29.919362068 CEST	1.1.1.1	192.168.2.4	0xc0a8	No error (0)	www.r3.ru		194.67.34.79	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:32.175247908 CEST	1.1.1.1	192.168.2.4	0x42fa	Name error (3)	widget.siteheart.com	none	none	65	IN (0x0001)	false
Jul 12, 2024 00:14:32.179806948 CEST	1.1.1.1	192.168.2.4	0xac9f	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:32.179806948 CEST	1.1.1.1	192.168.2.4	0xac9f	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:32.179806948 CEST	1.1.1.1	192.168.2.4	0xac9f	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:32.179806948 CEST	1.1.1.1	192.168.2.4	0xac9f	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:32.182173967 CEST	1.1.1.1	192.168.2.4	0xe2da	Name error (3)	widget.siteheart.com	none	none	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:32.565234900 CEST	1.1.1.1	192.168.2.4	0x3f6b	Name error (3)	widget.siteheart.com	none	none	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:34.534668922 CEST	1.1.1.1	192.168.2.4	0x89ce	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:34.534668922 CEST	1.1.1.1	192.168.2.4	0x89ce	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:34.534668922 CEST	1.1.1.1	192.168.2.4	0x89ce	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:34.534668922 CEST	1.1.1.1	192.168.2.4	0x89ce	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:35.141871929 CEST	1.1.1.1	192.168.2.4	0xe1b9	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Jul 12, 2024 00:14:35.142407894 CEST	1.1.1.1	192.168.2.4	0xdf61	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Jul 12, 2024 00:14:35.142407894 CEST	1.1.1.1	192.168.2.4	0xdf61	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:35.142407894 CEST	1.1.1.1	192.168.2.4	0xdf61	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:35.142407894 CEST	1.1.1.1	192.168.2.4	0xdf61	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:35.142407894 CEST	1.1.1.1	192.168.2.4	0xdf61	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:36.438247919 CEST	1.1.1.1	192.168.2.4	0x866e	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Jul 12, 2024 00:14:36.438247919 CEST	1.1.1.1	192.168.2.4	0x866e	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:36.438247919 CEST	1.1.1.1	192.168.2.4	0x866e	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:36.438247919 CEST	1.1.1.1	192.168.2.4	0x866e	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:36.438247919 CEST	1.1.1.1	192.168.2.4	0x866e	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:36.438879967 CEST	1.1.1.1	192.168.2.4	0xc020	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Jul 12, 2024 00:14:38.443775892 CEST	1.1.1.1	192.168.2.4	0x8c93	Name error (3)	widget.siteheart.com	none	none	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:38.444307089 CEST	1.1.1.1	192.168.2.4	0x9ac1	Name error (3)	widget.siteheart.com	none	none	65	IN (0x0001)	false
Jul 12, 2024 00:14:38.454719067 CEST	1.1.1.1	192.168.2.4	0xd226	Name error (3)	widget.siteheart.com	none	none	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:41.678141117 CEST	1.1.1.1	192.168.2.4	0x655e	No error (0)	steamcommunity.com		23.197.127.21	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:42.341187954 CEST	1.1.1.1	192.168.2.4	0xb216	No error (0)	steamcommunity.com		23.197.127.21	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:43.510699987 CEST	1.1.1.1	192.168.2.4	0xe34f	No error (0)	community.akamai.steamstatic.com		2.16.202.86	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:43.510699987 CEST	1.1.1.1	192.168.2.4	0xe34f	No error (0)	community.akamai.steamstatic.com		2.16.202.9	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:53.671818972 CEST	1.1.1.1	192.168.2.4	0x8ae2	No error (0)	store.steampowered.com		23.35.228.101	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:54.471477985 CEST	1.1.1.1	192.168.2.4	0x6876	No error (0)	store.steampowered.com		23.35.228.101	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:56.520450115 CEST	1.1.1.1	192.168.2.4	0xc392	No error (0)	store.akamai.steamstatic.com		2.19.126.227	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:56.520450115 CEST	1.1.1.1	192.168.2.4	0xc392	No error (0)	store.akamai.steamstatic.com		2.19.126.218	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:58.532289028 CEST	1.1.1.1	192.168.2.4	0x6f71	No error (0)	store.akamai.steamstatic.com		2.19.126.218	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:14:58.532289028 CEST	1.1.1.1	192.168.2.4	0x6f71	No error (0)	store.akamai.steamstatic.com		2.19.126.227	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:01.195991039 CEST	1.1.1.1	192.168.2.4	0xd3f7	No error (0)	cdn.akamai.steamstatic.com		95.101.54.209	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:01.195991039 CEST	1.1.1.1	192.168.2.4	0xd3f7	No error (0)	cdn.akamai.steamstatic.com		95.101.54.113	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:01.197191000 CEST	1.1.1.1	192.168.2.4	0xb3b	No error (0)	shared.akamai.steamstatic.com	shared.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 12, 2024 00:15:01.199215889 CEST	1.1.1.1	192.168.2.4	0x1d84	No error (0)	shared.akamai.steamstatic.com	shared.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 12, 2024 00:15:02.513896942 CEST	1.1.1.1	192.168.2.4	0xe82b	No error (0)	cdn.akamai.steamstatic.com		95.101.54.113	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:02.513896942 CEST	1.1.1.1	192.168.2.4	0xe82b	No error (0)	cdn.akamai.steamstatic.com		95.101.54.209	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:02.517401934 CEST	1.1.1.1	192.168.2.4	0xffe2	No error (0)	shared.akamai.steamstatic.com	shared.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 12, 2024 00:15:02.518033028 CEST	1.1.1.1	192.168.2.4	0xf07f	No error (0)	shared.akamai.steamstatic.com	shared.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 12, 2024 00:15:06.689920902 CEST	1.1.1.1	192.168.2.4	0x184c	No error (0)	store.steampowered.com		95.101.149.47	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:06.840128899 CEST	1.1.1.1	192.168.2.4	0x71b6	Name error (3)	widget.siteheart.com	none	none	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:10.202800035 CEST	1.1.1.1	192.168.2.4	0x20cc	No error (0)	api.steampowered.com		104.102.42.29	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:18.569768906 CEST	1.1.1.1	192.168.2.4	0x1465	No error (0)	api.steampowered.com		104.102.42.29	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:26.242727041 CEST	1.1.1.1	192.168.2.4	0x97d3	Name error (3)	widget.siteheart.com	none	none	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:36.241731882 CEST	1.1.1.1	192.168.2.4	0x7d66	No error (0)	cdn.akamai.steamstatic.com		2.16.241.11	A (IP address)	IN (0x0001)	false
Jul 12, 2024 00:15:36.241731882 CEST	1.1.1.1	192.168.2.4	0x7d66	No error (0)	cdn.akamai.steamstatic.com		2.16.241.6	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Jul 12, 2024 00:14:14.987297058 CEST	435	OUT	GET / HTTP/1.1 Host: steamcomunity.aiq.ru Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 12, 2024 00:14:15.955981970 CEST	1236	IN	HTTP/1.1 200 OK Server: Apache X-Powered-By: ModLayout/3.4 Content-Type: text/html; charset=windows-1251 Vary: accept-charset, user-agent Content-Length: 8838 Date: Thu, 11 Jul 2024 22:14:15 GMT X-Varnish: 1039711016 Age: 0 Via: 1.1 varnish Connection: keep-alive Data Raw: 0a ef bb bf 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 4d 45 54 41 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 53 74 65 61 6d 20 43 6f 6d 6d 75 6e 69 74 79 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 [TRUNCATED] Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><META http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Steam Community</title><link rel="shortcut icon" href="/favicon.ico" type="image/x-icon" /><link rel="stylesheet" type="text/css" href="https://steamcommunity.com/public/css/skin_1/global.css" /><link rel="stylesheet" type="text/css" href="https://steamcommunity.com/public/css/skin_1/home.css" /><link rel="stylesheet" type="text/css" href="https://steamcommunity.com/public/css/skin_1/header.css" /><script language="javascript" src="https://steamcommunity.com/public/javascript/global.js"></script><script language="javascript" src="https://steamcommunity.com/public/javascript/home.js"></script><script language="javascript">var captchaRefreshURL = 'https://steamcommunity.com/actions/RefreshCaptcha';var captchaImgURL = 'https://steam
Jul 12, 2024 00:14:15.955995083 CEST	224	IN	Data Raw: 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 63 61 70 74 63 68 61 2e 70 68 70 27 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 74 61 62 6c 65 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 Data Ascii: community.com/public/captcha.php';</script></head><body><table width="100%" cellspacing="0" cellpadding="0" border="0" bgcolor="#FFFFFF" align="center"><tbody><tr> <td width="100%" align="center"><a target="_blank
Jul 12, 2024 00:14:15.956001997 CEST	1236	IN	Data Raw: 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 72 33 2e 72 75 2f 22 3e 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 22 23 30 30 30 30 38 30 22 3e c0 ca d6 c8 df 20 ee f2 20 77 77 77 2e 52 33 2e 72 75 20 2d 20 f5 ee f1 f2 e8 ed e3 20 f1 e0 e9 f2 Data Ascii: " href="http://www.r3.ru/"><font color="#000080"> www.R3.ru - 72. . !</font></a></td></tr></tbody></table><br><center>... header bar, contains info browsing user if logged in --><div id="
Jul 12, 2024 00:14:15.956077099 CEST	224	IN	Data Raw: 0d 0a 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 4c 69 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 73 75 70 70 6f 72 74 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 22 3e 53 75 70 70 6f 72 74 3c 2f 61 3e 20 26 6e 62 Data Ascii: <a class="headerLink" href="http://support.steampowered.com/">Support</a>   \|  <a class="headerLink" href="http://store.steampowered.com/stats/">Stats</a></p></div><div id="subHeader"><div i
Jul 12, 2024 00:14:15.956087112 CEST	1236	IN	Data Raw: 64 3d 22 73 65 61 72 63 68 42 6f 78 22 3e 0d 0a 09 09 09 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 61 63 74 69 6f 6e 73 2f 53 65 Data Ascii: d="searchBox"><form method="GET" action="http://steamcommunity.com/actions/Search"><input id="searchInputBox" type="text" name="K" value="Search" onClick="if( this.value == 'Search' ) { this.value='' }" onFocus="if( this.value == 'Se
Jul 12, 2024 00:14:15.956100941 CEST	1236	IN	Data Raw: 61 6d 41 63 63 6f 75 6e 74 4e 61 6d 65 22 20 69 64 3d 22 73 74 65 61 6d 41 63 63 6f 75 6e 74 4e 61 6d 65 22 20 6d 61 78 6c 65 6e 67 74 68 3d 22 36 34 22 20 2f 3e 3c 62 72 20 2f 3e 0d 0a 09 09 09 09 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 73 74 65 61 Data Ascii: amAccountName" id="steamAccountName" maxlength="64" /><br /><label for="steamPassword">Password:</label><input class="textField" type="password" name="steamPassword" id="steamPassword" autocomplete="off" maxlength="64" /><br />
Jul 12, 2024 00:14:15.956111908 CEST	448	IN	Data Raw: 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 69 67 68 74 4c 6f 77 42 6c 6f 63 6b 46 6f 6f 74 65 72 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 69 6d 61 67 Data Ascii: <div class="rightLowBlockFooter"><img src="https://steamcommunity.com/public/images/trans.gif" width="254" height="8" border="0" /></div><div class="rightLowBlockHeader"><img src="https://steamcommunity.com/public/images/trans.gif" wid
Jul 12, 2024 00:14:16.083190918 CEST	1236	IN	Data Raw: 20 61 6e 64 20 6a 6f 69 6e 20 67 72 6f 75 70 73 3c 2f 6c 69 3e 0d 0a 09 09 09 09 09 09 3c 6c 69 3e 45 61 73 69 6c 79 20 73 65 65 20 79 6f 75 72 20 66 72 69 65 6e 64 73 20 6f 6e 6c 69 6e 65 20 61 6e 64 20 69 6e 2d 67 61 6d 65 3c 2f 6c 69 3e 0d 0a Data Ascii: and join groups</li><li>Easily see your friends online and in-game</li><li>Schedule matches and events</li><li>Review who you've played with lately</li><li>Track gameplay stats</li><li>Chat with groups<
Jul 12, 2024 00:14:16.083245039 CEST	224	IN	Data Raw: 0d 0a 09 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 61 62 6f 75 74 2f 22 3e 4a 6f 69 6e 20 53 74 65 61 6d 20 66 6f 72 20 66 72 65 65 3c 2f 61 3e 20 61 6e 64 20 70 Data Ascii: <a href="http://store.steampowered.com/about/">Join Steam for free</a> and purchase full retail versions of games delivered straight to your desktop, complete with automatic updates and in-game community features.<
Jul 12, 2024 00:14:16.083255053 CEST	1236	IN	Data Raw: 62 72 20 2f 3e 3c 62 72 20 2f 3e 0d 0a 09 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 74 65 61 6d 74 6f 75 72 2f 22 20 6f 6e 43 6c 69 63 6b 3d 22 77 69 6e 64 6f 77 2e Data Ascii: br /><br /><a href="http://www.steampowered.com/steamtour/" onClick="window.open(this.href, null, 'width=800,height=570');return false">Take a tour of Steam</a> to learn more.</div></div><br /><br /></div><
Jul 12, 2024 00:14:16.083261013 CEST	579	IN	Data Raw: 75 67 75 65 73 65 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 09 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 72 6f 6d 61 6e 69 61 6e 22 3e 52 6f 6d 61 6e 69 61 6e 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 09 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 72 75 Data Ascii: uguese</option><option value="romanian">Romanian</option><option value="russian">Russian</option><option value="schinese">Simplified Chinese</option><option value="tchinese">Traditional Chinese</option><option value="spanis
Jul 12, 2024 00:14:20.118865967 CEST	384	OUT	GET /favicon.ico HTTP/1.1 Host: steamcomunity.aiq.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://steamcomunity.aiq.ru/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 12, 2024 00:14:21.291857958 CEST	1236	IN	HTTP/1.1 200 OK Server: Apache Content-Type: text/html Accept-Ranges: bytes X-Varnish: 1117580094 1117579271 Via: 1.1 varnish, 1.1 steamcomunity.aiq.ru X-Cache: MISS from steamcomunity.aiq.ru Content-Length: 6045 Date: Thu, 11 Jul 2024 22:14:20 GMT X-Varnish: 1039711060 Age: 0 Via: 1.1 varnish Connection: keep-alive Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 31 22 3e 0a 3c 74 69 74 6c 65 3e 57 61 6c 6c 73 74 2e 72 75 20 2d 20 45 72 72 6f 72 3a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 63 65 6e 74 72 65 2e 72 75 2f 63 73 73 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 61 6c 6c 73 74 2e 72 75 2f 65 72 72 2f 62 6c 6f 6b 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 20 76 6c 69 6e 6b 3d 22 23 45 32 33 38 31 37 22 20 6c 69 6e 6b 3d 22 23 45 32 33 38 31 [TRUNCATED] Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1251"><title>Wallst.ru - Error:404 Not Found</title><link rel="stylesheet" href="http://www.centre.ru/css.css" type="text/css"><link rel="stylesheet" href="http://www.wallst.ru/err/blok.css" type="text/css"></head><body vlink="#E23817" link="#E23817" bgcolor="#1A4216" leftmargin="0" topmargin="0" text="#FFFFFF" alink="#E23817"><table width="100%" height="100%" border="0" cellspacing="0" cellpadding="0"><tr><td class="td_top" width="100%"> <a href="http://www.centre.ru/" target="_blank"><img height="50" src="http://www.centre.ru/img/logo.gif" width="208" border="0"></a></td></tr><tr><td align="center" height="100%" bgcolor="#A9BF4E" valign="top"><br><table border="0" cellspacing="0" cellpadding="0" id="table5"><tr><td class="td_arow_top_left"></td><td class="arow_bg_
Jul 12, 2024 00:14:21.292922974 CEST	1236	IN	HTTP/1.1 200 OK Server: Apache Content-Type: text/html Accept-Ranges: bytes X-Varnish: 1117580094 1117579271 Via: 1.1 varnish, 1.1 steamcomunity.aiq.ru X-Cache: MISS from steamcomunity.aiq.ru Content-Length: 6045 Date: Thu, 11 Jul 2024 22:14:20 GMT X-Varnish: 1039711060 Age: 0 Via: 1.1 varnish Connection: keep-alive Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 31 22 3e 0a 3c 74 69 74 6c 65 3e 57 61 6c 6c 73 74 2e 72 75 20 2d 20 45 72 72 6f 72 3a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 63 65 6e 74 72 65 2e 72 75 2f 63 73 73 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 61 6c 6c 73 74 2e 72 75 2f 65 72 72 2f 62 6c 6f 6b 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 20 76 6c 69 6e 6b 3d 22 23 45 32 33 38 31 37 22 20 6c 69 6e 6b 3d 22 23 45 32 33 38 31 [TRUNCATED] Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1251"><title>Wallst.ru - Error:404 Not Found</title><link rel="stylesheet" href="http://www.centre.ru/css.css" type="text/css"><link rel="stylesheet" href="http://www.wallst.ru/err/blok.css" type="text/css"></head><body vlink="#E23817" link="#E23817" bgcolor="#1A4216" leftmargin="0" topmargin="0" text="#FFFFFF" alink="#E23817"><table width="100%" height="100%" border="0" cellspacing="0" cellpadding="0"><tr><td class="td_top" width="100%"> <a href="http://www.centre.ru/" target="_blank"><img height="50" src="http://www.centre.ru/img/logo.gif" width="208" border="0"></a></td></tr><tr><td align="center" height="100%" bgcolor="#A9BF4E" valign="top"><br><table border="0" cellspacing="0" cellpadding="0" id="table5"><tr><td class="td_arow_top_left"></td><td class="arow_bg_
Jul 12, 2024 00:14:21.293378115 CEST	1236	IN	HTTP/1.1 200 OK Server: Apache Content-Type: text/html Accept-Ranges: bytes X-Varnish: 1117580094 1117579271 Via: 1.1 varnish, 1.1 steamcomunity.aiq.ru X-Cache: MISS from steamcomunity.aiq.ru Content-Length: 6045 Date: Thu, 11 Jul 2024 22:14:20 GMT X-Varnish: 1039711060 Age: 0 Via: 1.1 varnish Connection: keep-alive Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 31 22 3e 0a 3c 74 69 74 6c 65 3e 57 61 6c 6c 73 74 2e 72 75 20 2d 20 45 72 72 6f 72 3a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 63 65 6e 74 72 65 2e 72 75 2f 63 73 73 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 61 6c 6c 73 74 2e 72 75 2f 65 72 72 2f 62 6c 6f 6b 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 20 76 6c 69 6e 6b 3d 22 23 45 32 33 38 31 37 22 20 6c 69 6e 6b 3d 22 23 45 32 33 38 31 [TRUNCATED] Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1251"><title>Wallst.ru - Error:404 Not Found</title><link rel="stylesheet" href="http://www.centre.ru/css.css" type="text/css"><link rel="stylesheet" href="http://www.wallst.ru/err/blok.css" type="text/css"></head><body vlink="#E23817" link="#E23817" bgcolor="#1A4216" leftmargin="0" topmargin="0" text="#FFFFFF" alink="#E23817"><table width="100%" height="100%" border="0" cellspacing="0" cellpadding="0"><tr><td class="td_top" width="100%"> <a href="http://www.centre.ru/" target="_blank"><img height="50" src="http://www.centre.ru/img/logo.gif" width="208" border="0"></a></td></tr><tr><td align="center" height="100%" bgcolor="#A9BF4E" valign="top"><br><table border="0" cellspacing="0" cellpadding="0" id="table5"><tr><td class="td_arow_top_left"></td><td class="arow_bg_

Timestamp	Bytes transferred	Direction	Data
Jul 12, 2024 00:14:22.221924067 CEST	284	OUT	GET /favicon.ico HTTP/1.1 Host: steamcomunity.aiq.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 12, 2024 00:14:22.976181984 CEST	1236	IN	HTTP/1.1 200 OK Server: Apache Content-Type: text/html Accept-Ranges: bytes X-Varnish: 1117580117 1117580109 Via: 1.1 varnish, 1.1 steamcomunity.aiq.ru X-Cache: MISS from steamcomunity.aiq.ru Content-Length: 6045 Date: Thu, 11 Jul 2024 22:14:22 GMT X-Varnish: 1039711090 Age: 0 Via: 1.1 varnish Connection: keep-alive Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 31 22 3e 0a 3c 74 69 74 6c 65 3e 57 61 6c 6c 73 74 2e 72 75 20 2d 20 45 72 72 6f 72 3a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 63 65 6e 74 72 65 2e 72 75 2f 63 73 73 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 61 6c 6c 73 74 2e 72 75 2f 65 72 72 2f 62 6c 6f 6b 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 20 76 6c 69 6e 6b 3d 22 23 45 32 33 38 31 37 22 20 6c 69 6e 6b 3d 22 23 45 32 33 38 31 [TRUNCATED] Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1251"><title>Wallst.ru - Error:404 Not Found</title><link rel="stylesheet" href="http://www.centre.ru/css.css" type="text/css"><link rel="stylesheet" href="http://www.wallst.ru/err/blok.css" type="text/css"></head><body vlink="#E23817" link="#E23817" bgcolor="#1A4216" leftmargin="0" topmargin="0" text="#FFFFFF" alink="#E23817"><table width="100%" height="100%" border="0" cellspacing="0" cellpadding="0"><tr><td class="td_top" width="100%"> <a href="http://www.centre.ru/" target="_blank"><img height="50" src="http://www.centre.ru/img/logo.gif" width="208" border="0"></a></td></tr><tr><td align="center" height="100%" bgcolor="#A9BF4E" valign="top"><br><table border="0" cellspacing="0" cellpadding="0" id="table5"><tr><td class="td_arow_top_left"></td><td class="arow_bg_
Jul 12, 2024 00:14:22.976198912 CEST	224	IN	Data Raw: 74 6f 70 22 3e 3c 2f 74 64 3e 0a 09 09 09 09 3c 74 64 20 63 6c 61 73 73 3d 22 74 64 5f 61 72 6f 77 5f 74 6f 70 5f 72 69 67 68 74 22 3e 3c 2f 74 64 3e 0a 09 09 09 3c 2f 74 72 3e 0a 09 09 09 3c 21 2d 2d 2d 2d 3e 0a 09 09 09 09 09 09 3c 74 72 3e 0a Data Ascii: top"></td><td class="td_arow_top_right"></td></tr>...--><tr><td class="arow_bg_left"></td><td bgcolor="#DEED9A"><div align="center" ><table width="100%" border="0" cellpadding="0" ce
Jul 12, 2024 00:14:22.976212025 CEST	1236	IN	Data Raw: 6c 6c 73 70 61 63 69 6e 67 3d 22 34 22 20 69 64 3d 22 74 61 62 6c 65 36 22 3e 0a 09 09 09 09 09 09 3c 74 72 3e 0a 09 09 09 09 09 09 09 3c 74 64 20 77 69 64 74 68 3d 22 33 33 25 22 20 69 64 3d 22 66 6f 6e 2d 63 65 6e 74 72 65 22 20 61 6c 69 67 6e Data Ascii: llspacing="4" id="table6"><tr><td width="33%" id="fon-centre" align="center" valign="top"><div class="logo-partner"><img <img src="http://wallst.ru/err/img/r3-centre.png" border="0"><p>Centre.RU - 1997
Jul 12, 2024 00:14:22.976286888 CEST	224	IN	Data Raw: 2f 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 22 3e c7 e0 f5 ee e4 e8 20 ed e0 20 61 76 6f 6b 61 64 6f 2d 73 68 6f 70 2e 72 75 3c 2f 61 3e 3c 2f 62 3e 3c Data Ascii: /" target="_blank" style="text-decoration:none"> avokado-shop.ru</a></b></p></div></td></tr></table></div></td><td class="arow_bg_right"></td></tr>...--><tr><td c
Jul 12, 2024 00:14:22.976363897 CEST	1236	IN	Data Raw: 6c 61 73 73 3d 22 74 64 5f 61 72 6f 77 5f 64 6f 77 6e 5f 6c 65 66 74 22 3e 3c 2f 74 64 3e 0a 09 09 09 09 3c 74 64 20 63 6c 61 73 73 3d 22 61 72 6f 77 5f 62 67 5f 64 6f 77 6e 22 3e 3c 2f 74 64 3e 0a 09 09 09 09 3c 74 64 20 63 6c 61 73 73 3d 22 74 Data Ascii: lass="td_arow_down_left"></td><td class="arow_bg_down"></td><td class="td_arow_down_right"></td></tr><tr><td height="10"></td></tr><tr><td colspan="3" align="center"><table align="center" cellspacing="0" cel
Jul 12, 2024 00:14:22.976377010 CEST	224	IN	Data Raw: 2f 2f 6d 65 64 63 65 6e 74 72 2d 68 69 6d 6b 69 2e 72 75 2f 27 3b 22 3e 0a 0a 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 78 2d 66 61 73 68 69 6f 6e 22 3e 0a 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: //medcentr-himki.ru/';"><div class="tx-fashion"><a href="http://www.medcentr-himki.ru/" target="_blank" style="text-decoration:none"><p><b> .</b></p><ul><p>
Jul 12, 2024 00:14:22.976656914 CEST	1236	IN	Data Raw: e2 ea e8 20 e4 eb ff 20 c3 c8 c1 c4 c4 2c 20 e2 f1 e5 20 e2 e8 e4 fb 20 e0 ed e0 eb e8 e7 ee e2 2c 20 ec e5 e4 20 ea ed e8 e6 ea e8 2e 20 33 44 20 d3 c7 c8 2c 20 d4 c3 c4 d1 2c 20 dd ca c3 2c 20 ea ee ed f1 f3 eb fc f2 e0 f6 e8 e8 2c 20 e2 fb e7 Data Ascii: , , . 3D , , , , . , , , .</p></ul><p> <br> . !<br> .</p><p
Jul 12, 2024 00:14:22.976666927 CEST	224	IN	Data Raw: e9 20 eb e8 ed ea 20 3c 62 3e 2d 2d 3e 0a 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 61 6c 6c 73 74 2e 72 75 2f 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 74 69 74 6c 65 Data Ascii: <b>--><a href="http://www.wallst.ru/" target="_blank" title=" "><font style="font-size: 15px"><b> Wallst.ru<br>PHP, CGI, mysql, 100,<
Jul 12, 2024 00:14:23.100948095 CEST	538	IN	Data Raw: 62 72 3e 20 0a 09 09 09 09 09 09 09 46 54 50 20 e4 ee f1 f2 f3 ef 2c 20 ef ee f7 f2 e0 2e 3c 2f 61 3e 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 3c 2f 74 64 3e 0a 09 09 09 09 09 09 09 3c 74 64 20 77 69 Data Ascii: br> FTP , .</a></b></font></p></div></td><td width="240" height="60" bgcolor="#E23817" align="center"><b><font style="font-size: 22px; font-family: Tahoma; color: #FFFFFF">Error:404 Not Found<

Timestamp	Bytes transferred	Direction	Data
Jul 12, 2024 00:14:29.043456078 CEST	320	OUT	GET /style/style.css HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.r3.ru/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 12, 2024 00:14:29.736005068 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:29 GMT Content-Type: text/css Content-Length: 39201 Connection: keep-alive Last-Modified: Fri, 07 Apr 2017 11:01:24 GMT ETag: "1511a80-9921-54c918bdc6900" Accept-Ranges: bytes Data Raw: 0a 40 69 6d 70 6f 72 74 22 67 72 69 64 2e 63 73 73 22 3b 0a 2f 2a 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 7c 52 6f 62 6f 74 6f 2b 43 6f 6e 64 65 6e 73 65 64 26 73 75 62 73 65 74 3d 6c 61 74 69 6e 2c 63 79 72 69 6c 6c 69 63 29 3b 2a 2f 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 6f 72 61 3a 34 30 30 2c 37 30 30 26 73 75 62 73 65 74 3d 6c 61 74 69 6e 2c 63 79 72 69 6c 6c 69 63 29 3b 0a 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 63 6f 6d 6d 61 6e 64 2c 64 61 74 61 6c 69 73 74 2c 64 65 74 61 69 6c 73 2c 65 6d 62 65 64 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6b 65 79 67 65 6e 2c 6d 65 74 65 72 2c 6e 61 76 2c 6f 75 74 70 75 74 2c 70 72 6f 67 [TRUNCATED] Data Ascii: @import"grid.css";/@import url(https://fonts.googleapis.com/css?family=Roboto\|Roboto+Condensed&subset=latin,cyrillic);/@import url(https://fonts.googleapis.com/css?family=Lora:400,700&subset=latin,cyrillic);article,aside,audio,canvas,command,datalist,details,embed,figcaption,figure,footer,header,hgroup,keygen,meter,nav,output,progress,section,source,video{display:block}mark,rp,rt,ruby,summary,time{display:inline}/* Global properties ======================================================== /html {width:100%}body { font-family: 'Roboto Condensed', sans-serif;font-size:15px;line-height:18px;margin: 0;padding: 0;color:#848483;min-width:960px;}input {margin:0;font-size:12px; border:none; color:#848483; padding:6px 8px;outline:none; position:relative; font-family:Arial, Helvetica, sans-serif;background:#f5f5f5;box-shadow: inset 1px 1px #dcdcdc;border-radius:4px;}td {padding: 9px;}.main {width:960px;padding:0;margin:0 auto;}/***************
Jul 12, 2024 00:14:29.736041069 CEST	1236	IN	Data Raw: 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 66 6f 6e 74 73 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2e 72 65 67 20 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a Data Ascii: ***************fonts***********************************/.reg {text-transform:uppercase}.f_left, .fleft{float:left}.f_right, .fright{float:right}.align_right, .alignright {text-align:right}.align_center , .aligncenter {text-align:cente
Jul 12, 2024 00:14:29.736052990 CEST	1236	IN	Data Raw: 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 23 37 39 30 30 30 30 3b 7d 0a 0a 2e 6f 66 66 65 72 2d 6c 69 6e 6b 20 61 20 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 20 Data Ascii: t-decoration: underline; color:#790000;}.offer-link a {color:#fff;outline:none; text-decoration:none; cursor:pointer;}.offer-link a:hover{ text-decoration: underline; color:#790000;}/*******************************Displays************
Jul 12, 2024 00:14:29.736129999 CEST	673	IN	Data Raw: 3d 2a 2f 0a 0a 70 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 38 70 78 7d 0a 2e 70 32 7b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 3b 7d 0a 2e 70 33 7b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 7d 0a 2e 70 Data Ascii: =/p {margin-bottom:18px}.p2{ margin-bottom:24px;}.p3{ margin-bottom:10px;}.p4{ margin-bottom:35px;}.p5{ margin-bottom:20px;}/================================>> LISTS <<========================================*/ul{list-style: none
Jul 12, 2024 00:14:29.860366106 CEST	1236	IN	Data Raw: 0a 2e 6d 61 72 6b 65 72 33 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 69 6d 61 67 65 73 2f 6d 61 72 6b 65 72 33 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 3b 7d 0a 2e 6d 61 72 6b 65 72 34 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 Data Ascii: .marker3{background: url('/images/marker3.png') no-repeat;}.marker4{background: url('/images/marker4.png') no-repeat;}.list2 li{ background:url(/images/marker5.png) 0 6px no-repeat; padding-left:26px; margin-bottom:8px;}.list2 a{color:#68
Jul 12, 2024 00:14:29.860399961 CEST	1236	IN	Data Raw: 20 61 6c 6c 20 30 2e 34 73 20 65 61 73 65 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 34 73 20 65 61 73 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 34 73 20 65 61 73 65 3b 7d 0a 0a 2e 73 66 2d 6d 65 6e 75 20 Data Ascii: all 0.4s ease;-o-transition: all 0.4s ease;transition: all 0.4s ease;}.sf-menu a, .offer, .offer-link, .offer a, a.check , .list1 a, footer a, .list2 a{text-decoration:none !important;}.sf-menu span {float:left;position:relative}.sf-menu
Jul 12, 2024 00:14:29.860410929 CEST	448	IN	Data Raw: 72 2d 74 61 72 69 66 20 2e 74 69 74 6c 65 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 63 Data Ascii: r-tarif .title2{font-size: 16px; line-height: 20px; color: #fff;font-weight:bold;color:#fff;text-transform:uppercase;font-style:italic;margin-bottom:19px;}.color1{color:#0f876a;}.color2{color:#7aaa09;}.color3{color:#ffdf16;}.color4{color:
Jul 12, 2024 00:14:29.860511065 CEST	1236	IN	Data Raw: 20 0a 23 2e 6f 66 66 65 72 20 2e 70 72 69 63 65 7b 70 61 64 64 69 6e 67 3a 20 30 20 30 20 31 33 70 78 20 32 70 78 3b 7d 0a 2e 6f 66 66 65 72 20 2e 70 72 69 63 65 20 2e 66 31 2c 20 2e 6f 66 66 65 72 2d 74 61 72 69 66 20 2e 70 72 69 63 65 20 2e 66 Data Ascii: #.offer .price{padding: 0 0 13px 2px;}.offer .price .f1, .offer-tarif .price .f1{font-size: 32px; line-height: 38px; color: #4a4949;padding: 44px 0 0;}.offer .price .f2, .offer-tarif .price .f2{font-size: 79px; line-height: 95px; color: #f
Jul 12, 2024 00:14:29.860521078 CEST	224	IN	Data Raw: 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 20 33 70 78 20 31 31 70 78 20 35 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 39 70 78 3b 7d 0a 61 2e 63 68 65 63 6b 3a Data Ascii: -block;padding: 3px 11px 5px;color:#fff;font-size:15px;line-height:19px;}a.check:hover{background-position:0 -27px;}#check label{display:inline-block;padding: 2px 10px 0 0;}#check-bitton{padding:28px 0 0;}#check-bitton
Jul 12, 2024 00:14:29.860580921 CEST	1236	IN	Data Raw: 69 6e 70 75 74 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 31 70 78 20 31 70 Data Ascii: input{border:none;font-family:Arial, Helvetica, sans-serif;box-shadow:inset 1px 1px 0 #d9d9d9;padding: 6px 11px;font-size: 12px; color: #848484;height:15px;}a.check-bitton{display:inline-block;padding: 20px;color:#fff;font-size:18px;line-heig
Jul 12, 2024 00:14:29.860590935 CEST	224	IN	Data Raw: 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 70 61 67 65 5f 32 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2e 73 75 70 70 6f 72 74 7b 68 65 69 67 68 74 3a 37 31 70 78 3b 62 61 63 6b 67 Data Ascii: *********page_2***********************************/.support{height:71px;background: url('/images/support.png') no-repeat;padding: 15px 0 10px 186px;font-size:13px;color:#686868;margin-bottom:23px;}.support .title{font-
Jul 12, 2024 00:14:30.137113094 CEST	334	OUT	GET /style/grid.css HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.r3.ru/style/style.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 12, 2024 00:14:30.354701042 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:30 GMT Content-Type: text/css Content-Length: 2465 Connection: keep-alive Last-Modified: Thu, 20 Oct 2016 14:07:24 GMT ETag: "1511ee3-9a1-53f4c71de1f00" Accept-Ranges: bytes Data Raw: 2e 63 6f 6e 74 61 69 6e 65 72 5f 31 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 39 36 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0a 2e 67 72 69 64 5f 31 2c 2e 67 72 69 64 5f 32 2c 2e 67 72 69 64 5f 33 2c 2e 67 72 69 64 5f 34 2c 2e 67 72 69 64 5f 35 2c 2e 67 72 69 64 5f 36 2c 2e 67 72 69 64 5f 37 2c 2e 67 72 69 64 5f 38 2c 2e 67 72 69 64 5f 39 2c 2e 67 72 69 64 5f 31 30 2c 2e 67 72 69 64 5f 31 31 2c 2e 67 72 69 64 5f 31 32 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 3a 30 20 31 30 70 78 7d 2e 61 6c 70 68 61 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 6f 6d 65 67 61 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 63 6f 6e 74 61 69 6e 65 72 5f 31 32 20 2e 67 72 69 64 5f 31 7b 77 69 64 74 68 3a 36 30 70 78 7d 2e 63 6f 6e 74 61 69 6e 65 72 5f 31 32 20 2e 67 72 69 64 5f 32 7b 77 69 [TRUNCATED] Data Ascii: .container_12{margin-left:auto;margin-right:auto;width:960px;position:relative;}.grid_1,.grid_2,.grid_3,.grid_4,.grid_5,.grid_6,.grid_7,.grid_8,.grid_9,.grid_10,.grid_11,.grid_12{display:inline;float:left;position:relative;margin:0 10px}.alpha{margin-left:0}.omega{margin-right:0}.container_12 .grid_1{width:60px}.container_12 .grid_2{width:186px}.container_12 .grid_3{width:220px}.container_12 .grid_4{width:300px}.container_12 .grid_5{width:380px}.container_12 .grid_6 {width:460px}.container_12 .grid_7{width:540px}.container_12 .grid_8{width:620px}.container_12 .grid_9{width:700px}.container_12 .grid_10{width:780px}.container_12 .grid_11{width:860px}.container_12 .grid_12{width:940px}.container_12 .prefix_1{padding-left:80px}.container_12 .prefix_2{padding-left:160px}.container_12 .prefix_3{padding-left:240px}.container_12 .prefix_4{padding-left:320px}.container_12 .prefix_5{padding-left:400px}.container_12 .prefix_6{padding-left:480px}.container_12 .prefix_7{padding-left:
Jul 12, 2024 00:14:32.163341999 CEST	371	OUT	GET /images/buck-up12.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.r3.ru/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 12, 2024 00:14:32.560023069 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:32 GMT Content-Type: image/png Content-Length: 38615 Connection: keep-alive Last-Modified: Thu, 20 Oct 2016 09:52:56 GMT ETag: "1511abc-96d7-53f48e3d2ee00" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ca 00 00 00 c1 08 06 00 00 00 8e a2 2f 6b 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 01 36 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da ad 8e b1 4a c3 50 14 40 cf 8b a2 e2 50 2b 04 71 70 78 93 28 28 b6 ea 60 c6 a4 2d 45 10 ac d5 21 c9 d6 a4 a1 4a 69 12 5e 5e d5 7e 84 a3 5b 07 17 77 bf c0 c9 51 70 50 fc 02 ff 40 71 ea e0 10 21 83 83 08 9e e9 dc c3 e5 72 c1 a8 d8 75 a7 61 94 61 10 6b d5 6e 3a d2 f5 7c 39 fb c4 0c 53 00 d0 09 b3 d4 6e b5 0e 00 e2 24 8e f8 c1 e7 2b 02 e0 79 d3 ae 3b 0d fe c6 7c 98 2a 0d 4c 80 ed 6e 94 85 20 2a 40 ff 42 a7 1a c4 18 30 83 7e aa 41 dc 01 a6 3a 69 d7 40 3c 00 a5 5e ee 2f 40 29 c8 fd 0d 28 29 d7 f3 41 7c 00 66 cf f5 7c 30 e6 00 33 c8 7d 05 30 75 74 a9 01 6a 49 3a 52 67 bd 53 2d ab 96 65 49 bb 9b 04 91 3c 1e 65 3a 1a 64 72 3f 0e 13 95 26 aa a3 a3 2e 90 ff 07 c0 62 be d8 6e 3a 72 ad 6a 59 7b eb fc 33 ae e7 cb dc de 8f 10 80 58 7a 2c 5a 41 38 54 e7 df 2a [TRUNCATED] Data Ascii: PNGIHDR/kpHYs6iCCPPhotoshop ICC profilexJP@P+qpx((`-E!Ji^^~[wQpP@q!ruaakn:\|9Sn$+y;\|Ln @B0~A:i@<^/@)()A\|f\|03}0utjI:RgS-eI<e:dr?&.bn:rjY{3Xz,ZA8T*xoazR+V/OZOb:5iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/"
Jul 12, 2024 00:14:34.450876951 CEST	384	OUT	GET /images/spec-r3.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.r3.ru/style/style.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 12, 2024 00:14:34.669234991 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:34 GMT Content-Type: image/png Content-Length: 16619 Connection: keep-alive Last-Modified: Thu, 23 Jun 2016 12:21:24 GMT ETag: "1511a91-40eb-535f117aa9900" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 01 36 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da ad 8e b1 4a c3 50 14 40 cf 8b a2 e2 50 2b 04 71 70 78 93 28 28 b6 ea 60 c6 a4 2d 45 10 ac d5 21 c9 d6 a4 a1 4a 69 12 5e 5e d5 7e 84 a3 5b 07 17 77 bf c0 c9 51 70 50 fc 02 ff 40 71 ea e0 10 21 83 83 08 9e e9 dc c3 e5 72 c1 a8 d8 75 a7 61 94 61 10 6b d5 6e 3a d2 f5 7c 39 fb c4 0c 53 00 d0 09 b3 d4 6e b5 0e 00 e2 24 8e f8 c1 e7 2b 02 e0 79 d3 ae 3b 0d fe c6 7c 98 2a 0d 4c 80 ed 6e 94 85 20 2a 40 ff 42 a7 1a c4 18 30 83 7e aa 41 dc 01 a6 3a 69 d7 40 3c 00 a5 5e ee 2f 40 29 c8 fd 0d 28 29 d7 f3 41 7c 00 66 cf f5 7c 30 e6 00 33 c8 7d 05 30 75 74 a9 01 6a 49 3a 52 67 bd 53 2d ab 96 65 49 bb 9b 04 91 3c 1e 65 3a 1a 64 72 3f 0e 13 95 26 aa a3 a3 2e 90 ff 07 c0 62 be d8 6e 3a 72 ad 6a 59 7b eb fc 33 ae e7 cb dc de 8f 10 80 58 7a 2c 5a 41 38 54 e7 df 2a [TRUNCATED] Data Ascii: PNGIHDR22?pHYs6iCCPPhotoshop ICC profilexJP@P+qpx((`-E!Ji^^~[wQpP@q!ruaakn:\|9Sn$+y;\|Ln @B0~A:i@<^/@)()A\|f\|03}0utjI:RgS-eI<e:dr?&.bn:rjY{3Xz,ZA8T*xoazR+V/OZOb:3iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/"
Jul 12, 2024 00:14:35.136162043 CEST	439	OUT	GET /images/marker2.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.r3.ru/style/style.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Jul 12, 2024 00:14:35.353846073 CEST	443	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:35 GMT Content-Type: image/png Content-Length: 194 Connection: keep-alive Last-Modified: Tue, 04 Sep 2012 09:19:07 GMT ETag: "1511eee-c2-4c8dcc008b8c0" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 08 00 00 00 08 08 06 00 00 00 c4 0f be 8b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 64 49 44 41 54 78 da 62 fc 7f 5f 8c 01 08 a4 81 b8 17 88 6d 18 20 e0 08 10 17 03 f1 53 46 a0 02 75 20 e3 18 10 0b 31 a0 82 77 40 6c cb 04 24 5a b0 48 32 40 c5 5a 40 26 7c 00 32 f8 19 b0 83 2f 4c 0c 04 00 48 c1 3e 3c f2 bb 41 56 68 01 19 87 f1 39 f2 1a 10 eb 01 f1 1a 20 7e 01 c5 6b a0 62 d7 00 02 0c 00 3e b9 18 f9 7d 1b af e8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<dIDATxb_m SFu 1w@l$ZH2@Z@&\|2/LH><AVh9 ~kb>}IENDB`
Jul 12, 2024 00:14:38.669029951 CEST	456	OUT	GET /images/l2_dle.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.r3.ru/nedorogoy_hosting.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Jul 12, 2024 00:14:38.889367104 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:38 GMT Content-Type: image/png Content-Length: 5725 Connection: keep-alive Last-Modified: Thu, 24 Mar 2016 18:55:20 GMT ETag: "15118dc-165d-52ecffcec3600" Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 07 53 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 08 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 6e 00 00 00 1b 01 05 00 01 00 00 00 76 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 0b 00 00 00 7e 00 00 00 32 01 02 00 14 00 00 00 8a 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 9e 00 00 00 ec 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 47 49 4d 50 20 32 2e 36 2e 38 00 00 32 30 31 33 3a 30 31 3a 31 37 20 31 32 3a 35 39 3a 31 33 00 06 00 00 90 07 00 04 00 00 00 30 32 32 31 90 92 02 00 04 00 00 00 37 35 30 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 aa 00 00 00 03 a0 04 00 01 00 00 00 78 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 00 01 00 00 00 3a 01 00 00 1b 01 05 00 01 00 00 00 42 01 00 00 28 01 03 00 01 00 00 00 02 00 00 00 01 02 04 00 01 00 00 00 4a 01 00 00 02 02 04 00 01 00 00 00 f9 05 [TRUNCATED] Data Ascii: JFIFHHSExifIInv(1~2iHHGIMP 2.6.82013:01:17 12:59:1302217500100x:B(JHHJFIFC%# , #&'))-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((2G"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?

Timestamp	Bytes transferred	Direction	Data
Jul 12, 2024 00:14:29.044770956 CEST	306	OUT	GET /inc/auth_ajax.js HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.r3.ru/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 12, 2024 00:14:29.739063025 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:29 GMT Content-Type: application/javascript Content-Length: 4259 Connection: keep-alive Last-Modified: Thu, 10 Mar 2016 10:52:17 GMT ETag: "158a429-10a3-52daf9b9f7a40" Accept-Ranges: bytes Data Raw: 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 5f 77 68 6f 69 73 28 29 7b 0a 09 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 77 68 6f 69 73 5f 64 6f 6d 61 69 6e 27 29 2e 76 61 6c 75 65 3b 0a 09 6a 51 75 65 72 79 2e 61 6a 61 78 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 65 3a 20 22 50 4f 53 54 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 3a 20 22 2f 69 6e 63 2f 70 72 6f 78 79 5f 77 68 6f 69 73 2e 70 68 70 22 2c 0a 09 09 64 61 74 61 3a 20 22 64 6f 6d 61 69 6e 3d 22 2b 64 6f 6d 61 69 6e 2c 0a 09 09 63 61 63 68 65 3a 20 66 61 6c 73 65 2c 0a 09 20 20 20 20 20 20 20 20 64 61 74 61 54 79 70 65 3a 22 78 6d 6c 22 2c 0a 09 20 20 20 20 20 20 20 20 73 75 63 63 65 73 73 3a 20 66 75 6e 63 74 69 6f 6e 28 64 61 74 61 29 20 7b 0a 09 09 09 69 66 20 28 24 28 64 61 74 61 29 2e 66 69 6e 64 28 27 73 74 61 74 75 73 27 29 2e 74 65 78 74 28 29 20 21 3d 20 22 66 72 65 65 22 29 7b 0a 09 09 09 09 6a 51 75 65 72 79 28 27 [TRUNCATED] Data Ascii: function check_whois(){var domain = document.getElementById('whois_domain').value;jQuery.ajax({ type: "POST", url: "/inc/proxy_whois.php",data: "domain="+domain,cache: false, dataType:"xml", success: function(data) {if ($(data).find('status').text() != "free"){jQuery('#whois_free').css("display", "none");jQuery('#whois_busy').css("display", "block");} else {jQuery('#whois_free').css("display", "block"); jQuery('#whois_busy').css("display", "none");}}});}function authExit() {jQuery.removeCookie('auth', { path: '/' });jQuery.removeCookie('data1', { path: '/' });jQuery.removeCookie('data2', { path: '/' });jQuery.removeCookie('authkey', { path: '/' }); checkcookie();}function keyScript(event) { if (event.which == 13 \|\| event.keyCode == 13) {jQuery('#login').click(); return false; } r
Jul 12, 2024 00:14:29.739075899 CEST	1236	IN	Data Raw: 65 74 75 72 6e 20 74 72 75 65 3b 0a 20 20 20 20 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 67 6f 74 6f 62 69 6c 6c 28 29 20 7b 0a 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 2e 61 6a 61 78 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 Data Ascii: eturn true; };function gotobill() { jQuery.ajax({ type: "GET", url: "/inc/proxy.php?auth=gotobill", cache: false,success: function(data){window.location=data;return false;}
Jul 12, 2024 00:14:29.739087105 CEST	448	IN	Data Raw: 20 2f 2f 20 d0 9a d1 80 d0 b5 d0 b4 d0 b8 d1 82 d0 bd d1 8b d0 b9 20 d0 bb d0 b8 d0 bc d0 b8 d1 82 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 22 73 70 61 6e 23 65 6e 6f 75 67 68 64 61 79 73 22 Data Ascii: // jQuery("span#enoughdays").html(data.elem[0].enoughdays); // ... },error: function() {authExit();} });//func=user jQuery.ajax(
Jul 12, 2024 00:14:29.739589930 CEST	1236	IN	Data Raw: 6e 28 64 61 74 61 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 22 73 70 61 6e 23 61 63 63 6c 6f 67 69 6e 22 29 2e 68 74 6d 6c 28 64 61 74 61 2e 65 6c 65 6d 5b 30 5d 2e 6e 61 6d 65 29 3b Data Ascii: n(data) { jQuery("span#acclogin").html(data.elem[0].name); // login jQuery("span#accname").html(data.elem[0].realname); // } }); jQuery(
Jul 12, 2024 00:14:29.739667892 CEST	225	IN	Data Raw: 72 79 2e 63 6f 6f 6b 69 65 28 20 27 64 61 74 61 32 27 2c 20 64 61 74 61 2e 64 61 74 61 32 2c 20 7b 20 70 61 74 68 3a 20 27 2f 27 20 7d 20 29 3b 0a 09 09 6a 51 75 65 72 79 2e 63 6f 6f 6b 69 65 28 20 27 61 75 74 68 6b 65 79 27 2c 20 64 61 74 61 2e Data Ascii: ry.cookie( 'data2', data.data2, { path: '/' } );jQuery.cookie( 'authkey', data.authkey, { path: '/' } );} else {//alert (data.auth);jQuery("div#errormsg").html('Auth Failed!');jQuery("div#errormsg").css("co
Jul 12, 2024 00:14:29.866863012 CEST	143	IN	Data Raw: 6c 6f 72 22 2c 20 22 72 65 64 22 29 3b 0a 09 09 7d 0a 09 09 63 68 65 63 6b 63 6f 6f 6b 69 65 28 29 3b 20 2f 2f 43 68 65 63 6b 20 63 6f 6f 6b 69 65 20 61 66 74 65 72 20 61 75 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 Data Ascii: lor", "red");}checkcookie(); //Check cookie after auth } }); });// return false; // prevent default });
Jul 12, 2024 00:14:32.163892031 CEST	373	OUT	GET /images/portf_right.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.r3.ru/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 12, 2024 00:14:32.560568094 CEST	498	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:32 GMT Content-Type: image/png Content-Length: 249 Connection: keep-alive Last-Modified: Sun, 10 Jul 2016 14:05:29 GMT ETag: "1511a9b-f9-5374887331c40" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0b 00 00 00 19 08 06 00 00 00 e7 b2 d4 b6 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 9b 49 44 41 54 78 da ec 94 c1 09 03 21 10 45 8d 06 5b b0 a2 d8 c5 76 b1 15 a5 8b a4 2a 15 54 14 c1 f8 0f 03 12 b2 eb b0 e7 3c f0 22 6f fe c5 f9 de 7a ef 02 84 10 8c 94 d2 68 ad ed 38 8f 71 65 c5 37 90 69 80 f0 de 9b d6 da 73 dc bf fa c4 4f 99 c8 39 6f f3 c0 a9 0c 62 8c 96 06 96 32 28 a5 ec 6c d9 39 67 90 ce 92 29 5d 0a 26 b5 d6 37 3b 19 b0 93 ff f2 65 19 4f ce 96 95 52 7c 19 0d 62 3f 37 b6 8e 95 8c 8d 3b ec e0 a5 a6 a4 94 d6 1d 3c 6a f7 7d 16 56 ff c6 47 80 01 00 79 52 cc 26 63 ba 75 b7 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<IDATx!E[v*T<"ozh8qe7isO9ob2(l9g)]&7;eOR\|b?7;<j}VGyR&cuIENDB`
Jul 12, 2024 00:14:32.608715057 CEST	498	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:32 GMT Content-Type: image/png Content-Length: 249 Connection: keep-alive Last-Modified: Sun, 10 Jul 2016 14:05:29 GMT ETag: "1511a9b-f9-5374887331c40" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0b 00 00 00 19 08 06 00 00 00 e7 b2 d4 b6 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 9b 49 44 41 54 78 da ec 94 c1 09 03 21 10 45 8d 06 5b b0 a2 d8 c5 76 b1 15 a5 8b a4 2a 15 54 14 c1 f8 0f 03 12 b2 eb b0 e7 3c f0 22 6f fe c5 f9 de 7a ef 02 84 10 8c 94 d2 68 ad ed 38 8f 71 65 c5 37 90 69 80 f0 de 9b d6 da 73 dc bf fa c4 4f 99 c8 39 6f f3 c0 a9 0c 62 8c 96 06 96 32 28 a5 ec 6c d9 39 67 90 ce 92 29 5d 0a 26 b5 d6 37 3b 19 b0 93 ff f2 65 19 4f ce 96 95 52 7c 19 0d 62 3f 37 b6 8e 95 8c 8d 3b ec e0 a5 a6 a4 94 d6 1d 3c 6a f7 7d 16 56 ff c6 47 80 01 00 79 52 cc 26 63 ba 75 b7 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<IDATx!E[v*T<"ozh8qe7isO9ob2(l9g)]&7;eOR\|b?7;<j}VGyR&cuIENDB`
Jul 12, 2024 00:14:33.766561985 CEST	382	OUT	GET /images/offer.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.r3.ru/style/style.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 12, 2024 00:14:33.985778093 CEST	370	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:33 GMT Content-Type: image/png Content-Length: 121 Connection: keep-alive Last-Modified: Tue, 04 Sep 2012 09:19:07 GMT ETag: "1511ee2-79-4c8dcc008b8c0" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 0a 08 06 00 00 00 8d 32 cf bd 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 1b 49 44 41 54 78 da 62 64 60 60 f0 65 20 02 30 31 10 09 46 15 52 47 21 40 80 01 00 8b bc 00 61 55 4a 79 8b 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR2tEXtSoftwareAdobe ImageReadyqe<IDATxbd``e 01FRG!@aUJyIENDB`
Jul 12, 2024 00:14:34.376533031 CEST	383	OUT	GET /images/vps-r3.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.r3.ru/style/style.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 12, 2024 00:14:35.123029947 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:34 GMT Content-Type: image/png Content-Length: 38108 Connection: keep-alive Last-Modified: Thu, 23 Jun 2016 13:21:07 GMT ETag: "1511a95-94dc-535f1ed3ad6c0" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b9 00 00 00 96 08 06 00 00 00 82 57 29 bf 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 01 36 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da ad 8e b1 4a c3 50 14 40 cf 8b a2 e2 50 2b 04 71 70 78 93 28 28 b6 ea 60 c6 a4 2d 45 10 ac d5 21 c9 d6 a4 a1 4a 69 12 5e 5e d5 7e 84 a3 5b 07 17 77 bf c0 c9 51 70 50 fc 02 ff 40 71 ea e0 10 21 83 83 08 9e e9 dc c3 e5 72 c1 a8 d8 75 a7 61 94 61 10 6b d5 6e 3a d2 f5 7c 39 fb c4 0c 53 00 d0 09 b3 d4 6e b5 0e 00 e2 24 8e f8 c1 e7 2b 02 e0 79 d3 ae 3b 0d fe c6 7c 98 2a 0d 4c 80 ed 6e 94 85 20 2a 40 ff 42 a7 1a c4 18 30 83 7e aa 41 dc 01 a6 3a 69 d7 40 3c 00 a5 5e ee 2f 40 29 c8 fd 0d 28 29 d7 f3 41 7c 00 66 cf f5 7c 30 e6 00 33 c8 7d 05 30 75 74 a9 01 6a 49 3a 52 67 bd 53 2d ab 96 65 49 bb 9b 04 91 3c 1e 65 3a 1a 64 72 3f 0e 13 95 26 aa a3 a3 2e 90 ff 07 c0 62 be d8 6e 3a 72 ad 6a 59 7b eb fc 33 ae e7 cb dc de 8f 10 80 58 7a 2c 5a 41 38 54 e7 df 2a [TRUNCATED] Data Ascii: PNGIHDRW)pHYs6iCCPPhotoshop ICC profilexJP@P+qpx((`-E!Ji^^~[wQpP@q!ruaakn:\|9Sn$+y;\|Ln @B0~A:i@<^/@)()A\|f\|03}0utjI:RgS-eI<e:dr?&.bn:rjY{3Xz,ZA8T*xoazR+V/OZOb:5iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/"
Jul 12, 2024 00:14:35.123049974 CEST	224	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 74 69 66 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 74 69 66 66 2f 31 2e 30 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 65 78 69 66 3d 22 68 74 74 70 Data Ascii: xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/"> <xmp:CreatorTool>Adobe Photoshop CC 2015 (Windows)</xmp:CreatorTool> <xmp:CreateDate>2016-06-23T
Jul 12, 2024 00:14:35.151925087 CEST	1236	IN	Data Raw: 31 36 3a 32 31 3a 30 36 2b 30 33 3a 30 30 3c 2f 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3e 32 30 31 36 2d 30 36 2d 32 33 54 31 36 3a 32 31 3a 30 36 2b 30 33 3a Data Ascii: 16:21:06+03:00</xmp:CreateDate> <xmp:MetadataDate>2016-06-23T16:21:06+03:00</xmp:MetadataDate> <xmp:ModifyDate>2016-06-23T16:21:06+03:00</xmp:ModifyDate> <xmpMM:InstanceID>xmp.iid:4c85dcf3-ebb4-1749-8412-a90a06223593
Jul 12, 2024 00:14:35.151974916 CEST	224	IN	Data Raw: 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 57 69 6e 64 6f 77 73 29 3c 2f 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3e 2f 3c 2f 73 Data Ascii: shop CC 2015 (Windows)</stEvt:softwareAgent> <stEvt:changed>/</stEvt:changed> </rdf:li> </rdf:Seq> </xmpMM:History> <dc:format>image/png</dc:format> <ph
Jul 12, 2024 00:14:35.245712042 CEST	1236	IN	Data Raw: 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3e 33 3c 2f 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 70 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c 65 3e 41 64 6f 62 65 20 52 47 42 Data Ascii: otoshop:ColorMode>3</photoshop:ColorMode> <photoshop:ICCProfile>Adobe RGB (1998)</photoshop:ICCProfile> <tiff:Orientation>1</tiff:Orientation> <tiff:XResolution>720000/10000</tiff:XResolution> <tiff:YResolut
Jul 12, 2024 00:14:35.245754004 CEST	224	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Jul 12, 2024 00:14:38.148499012 CEST	540	OUT	GET /nedorogoy_hosting.php HTTP/1.1 Host: www.r3.ru Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://www.r3.ru/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Jul 12, 2024 00:14:38.373702049 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive X-Powered-By: PHP/5.3.27 Data Raw: 31 66 32 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 d0 97 d0 b4 d0 b5 d1 81 d1 8c 20 d0 b2 d1 8b 20 d0 bc d0 be d0 b6 d0 b5 d1 82 d0 b5 20 d0 b2 d1 8b d0 b1 d1 80 d0 b0 d1 82 d1 8c 20 d0 bd d1 83 d0 b6 d0 bd d1 8b d0 b9 20 d0 b2 d0 b0 d1 81 20 d1 82 d0 b0 d1 80 d0 b8 d1 84 d0 bd d1 8b d0 b9 20 d0 bf d0 bb d0 b0 d0 bd 20 d0 b8 20 d0 b7 d0 b0 d0 ba d0 b0 d0 b7 d0 b0 d1 82 d1 8c 20 d0 bd d0 b5 d0 b4 d0 be d1 80 d0 be d0 b3 d0 be d0 b9 20 d1 85 d0 be d1 81 d1 82 d0 b8 d0 bd d0 b3 2e 20 d0 a3 d0 b4 d0 be d0 b1 d0 bd d0 b0 d1 8f 20 d0 bf d0 b0 d0 bd d0 b5 d0 bb d1 8c 20 d1 83 d0 bf d1 80 d0 b0 d0 b2 d0 bb d0 b5 d0 bd d0 b8 d1 8f 20 d1 83 d1 81 d0 bb d1 83 d0 b3 d0 b0 d0 bc d0 b8 20 49 53 50 20 4d 61 6e 61 67 65 72 20 d0 bd d0 b0 20 d0 b2 d1 81 d0 b5 d1 85 20 d1 82 d0 b0 [TRUNCATED] Data Ascii: 1f23<!DOCTYPE html><html><head> <meta charset="utf-8"><meta name="description" content=" . ISP Manager ." /><meta name="keywords" content="" /><link rel="icon" href="images/favicon.ico" type="image/x-icon" /><link rel="shortcut icon" href="images/favicon.ico" type="image/x-icon" /><title> R3.ru - , .</title><script type="text/javascript" src="/inc/jquery.js"></script><script type="text/javascript" src="/inc/jquery.cookie.js"></script><script type="text/javascript" src="/inc/auth_ajax.js"></script><script type="text/javascript" src="/inc/message.js"></script><link rel="stylesheet [TRUNCATED]
Jul 12, 2024 00:14:38.676651955 CEST	462	OUT	GET /images/l2_druplicon.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.r3.ru/nedorogoy_hosting.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Jul 12, 2024 00:14:38.896688938 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:38 GMT Content-Type: image/png Content-Length: 2734 Connection: keep-alive Last-Modified: Thu, 24 Mar 2016 18:55:47 GMT ETag: "15118d3-aae-52ecffe8832c0" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 23 00 00 00 28 08 06 00 00 00 74 1e 43 9a 00 00 00 09 70 48 59 73 00 00 1e c2 00 00 1e c2 01 6e d0 75 3e 00 00 0a 60 49 44 41 54 58 85 bd 98 7f 90 95 d5 79 c7 3f cf 73 de f7 de fd c1 5d d8 5d 7e 2c 94 e5 47 80 2c 88 22 50 b0 a0 12 c1 58 62 e3 4c 88 26 31 a2 e9 d6 b4 26 6d 64 1c 6b 46 53 27 69 9c da d6 26 31 1d 67 52 93 d6 a4 c6 34 13 25 4d 4d c4 10 95 a8 98 56 59 b0 fe 40 85 0a 0b 02 b2 cb b2 cb fe 60 d9 dd bb f7 ee de 7b df f7 9c d3 3f de dd cd 9a 22 a8 31 7d 66 de 99 3b e7 7d ef 39 9f f3 3c df f3 9c e7 1c 78 6f 26 00 a4 27 cc 20 53 b7 26 69 11 f3 1e fb fa 2d 4d 44 01 ca a6 d4 af 98 bb e9 be 6e d2 55 f3 e5 7d 00 d2 f7 c8 a2 aa 2a 93 67 cc 3a af 71 e3 d5 53 58 7f db cf d5 04 d5 78 2c a2 c1 ff 23 8c 68 68 d4 3b e7 fc fa 2b af b9 e1 23 73 ca 3d f3 2f 3e c7 5f 7e eb 2f 10 aa f0 2e 46 4d c8 68 28 7f 47 26 a2 26 08 34 19 63 de c5 1f fb db 5c a1 e4 ef dd d9 66 b9 f1 b1 c8 7c 65 a7 e7 e3 77 ee a6 a2 7a f1 d8 3f d4 98 d1 90 be 13 7b 47 31 16 55 13 a8 [TRUNCATED] Data Ascii: PNGIHDR#(tCpHYsnu>`IDATXy?s]]~,G,"PXbL&1&mdkFS'i&1gR4%MMVY@`{?"1}f;}9<xo&' S&i-MDnU}*g:qSXx,#hh;+#s=/>_~/.FMh(G&&4c\f\|ewz?{G1U8s>C}<goyr(qRw 6w4?Qc_~zyH(qQYa[u=eydNPFTz6/~o}5TsGyDEij@X>/c3VdjL2oOLWgd`8BxoR\"j3 ?7\|abYEUSISDUBGKRwo32c/>m/[.E5Fky~njxK`D=i1}xoj'/p3~Zk0'evqct(tT54j?E^{y-/^=;'H[?;v bJEW+HutmiCh9\|f<}x[{oPcs,'zvwG@/wnFLT)cd

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://steamcomunity.aiq.ru/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\Downloads\953f5050-3fe0-452b-afa6-006d607e6b4d.tmp

C:\Users\user\Downloads\Unconfirmed 265960.crdownload

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Windows Analysis Report
http://steamcomunity.aiq.ru/

Timestamp	Bytes transferred	Direction	Data
Jul 12, 2024 00:14:29.932265043 CEST	279	OUT	GET /inc/site_heart.js HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 12, 2024 00:14:30.642923117 CEST	821	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:30 GMT Content-Type: application/javascript Content-Length: 558 Connection: keep-alive Last-Modified: Mon, 28 Mar 2016 11:43:02 GMT ETag: "158a402-22e-52f1a6a433d80" Accept-Ranges: bytes Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 76 61 72 20 77 69 64 67 65 74 5f 69 64 20 3d 20 38 33 32 33 36 35 3b 0a 09 5f 73 68 63 70 20 3d 5b 7b 77 69 64 67 65 74 5f 69 64 20 3a 20 77 69 64 67 65 74 5f 69 64 7d 5d 3b 0a 09 76 61 72 20 6c 61 6e 67 20 3d 28 6e 61 76 69 67 61 74 6f 72 2e 6c 61 6e 67 75 61 67 65 20 7c 7c 20 6e 61 76 69 67 61 74 6f 72 2e 73 79 73 74 65 6d 4c 61 6e 67 75 61 67 65 20 0a 09 09 7c 7c 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 4c 61 6e 67 75 61 67 65 20 7c 7c 22 65 6e 22 29 0a 09 09 2e 73 75 62 73 74 72 28 30 2c 32 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 09 76 61 72 20 75 72 6c 20 3d 22 77 69 64 67 65 74 2e 73 69 74 65 68 65 61 72 74 2e 63 6f 6d 2f 77 69 64 67 65 74 2f 73 68 2f 22 2b 20 77 69 64 67 65 74 5f 69 64 20 2b 22 2f 22 2b 20 6c 61 6e 67 20 2b 22 2f 77 69 64 67 65 74 2e 6a 73 22 3b 0a 09 76 61 72 20 68 63 63 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0a 09 68 63 63 2e 74 79 70 65 20 3d 22 74 [TRUNCATED] Data Ascii: (function(){var widget_id = 832365;_shcp =[{widget_id : widget_id}];var lang =(navigator.language \|\| navigator.systemLanguage \|\| navigator.userLanguage \|\|"en").substr(0,2).toLowerCase();var url ="widget.siteheart.com/widget/sh/"+ widget_id +"/"+ lang +"/widget.js";var hcc = document.createElement("script");hcc.type ="text/javascript";hcc.async =true;hcc.src =("https:"== document.location.protocol ?"https":"http")+"://"+ url;var s = document.getElementsByTagName("script")[0];s.parentNode.insertBefore(hcc, s.nextSibling);})();
Jul 12, 2024 00:14:30.680335999 CEST	278	OUT	GET /images/graph.svg HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 12, 2024 00:14:30.904534101 CEST	1230	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:30 GMT Content-Type: image/svg+xml Content-Length: 976 Connection: keep-alive Last-Modified: Wed, 19 Oct 2016 21:57:23 GMT ETag: "1511ab6-3d0-53f3ee4d156c0" Accept-Ranges: bytes Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 20 50 55 42 4c 49 43 20 27 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 27 20 20 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 27 3e 3c 73 76 67 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 35 30 20 35 30 22 20 68 65 69 67 68 74 3d 22 35 30 70 78 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 20 35 30 22 20 77 69 64 74 68 3d 22 35 30 70 78 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 72 65 63 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><!DOCTYPE svg PUBLIC '-//W3C//DTD SVG 1.1//EN' 'http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd'><svg enable-background="new 0 0 50 50" height="50px" id="Layer_1" version="1.1" viewBox="0 0 50 50" width="50px" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><rect fill="none" height="50" width="50"/><circle cx="2" cy="25" r="2"/><circle cx="15" cy="19" r="2"/><circle cx="25" cy="11" r="2"/><circle cx="35" cy="17" r="2"/><circle cx="48" cy="5" r="2"/><circle cx="2" cy="39" r="2"/><circle cx="15" cy="41" r="2"/><circle cx="25" cy="33" r="2"/><circle cx="35" cy="43" r="2"/><circle cx="48" cy="31" r="2"/><polyline fill="none" points="2,25 15,19 25,11 35,17 48,5 " stroke="#000000" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2"/><polyline fill="none" points="2,39 15,41 25,33 35,43 48,31 " stroke="#000000" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2"/></svg>
Jul 12, 2024 00:14:34.500277042 CEST	339	OUT	GET /images/dr-web-spam.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Jul 12, 2024 00:14:34.720218897 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:34 GMT Content-Type: image/png Content-Length: 61714 Connection: keep-alive Last-Modified: Thu, 20 Oct 2016 09:49:58 GMT ETag: "1511abb-f112-53f48d936dd80" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ca 00 00 00 c1 08 06 00 00 00 8e a2 2f 6b 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 01 36 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da ad 8e b1 4a c3 50 14 40 cf 8b a2 e2 50 2b 04 71 70 78 93 28 28 b6 ea 60 c6 a4 2d 45 10 ac d5 21 c9 d6 a4 a1 4a 69 12 5e 5e d5 7e 84 a3 5b 07 17 77 bf c0 c9 51 70 50 fc 02 ff 40 71 ea e0 10 21 83 83 08 9e e9 dc c3 e5 72 c1 a8 d8 75 a7 61 94 61 10 6b d5 6e 3a d2 f5 7c 39 fb c4 0c 53 00 d0 09 b3 d4 6e b5 0e 00 e2 24 8e f8 c1 e7 2b 02 e0 79 d3 ae 3b 0d fe c6 7c 98 2a 0d 4c 80 ed 6e 94 85 20 2a 40 ff 42 a7 1a c4 18 30 83 7e aa 41 dc 01 a6 3a 69 d7 40 3c 00 a5 5e ee 2f 40 29 c8 fd 0d 28 29 d7 f3 41 7c 00 66 cf f5 7c 30 e6 00 33 c8 7d 05 30 75 74 a9 01 6a 49 3a 52 67 bd 53 2d ab 96 65 49 bb 9b 04 91 3c 1e 65 3a 1a 64 72 3f 0e 13 95 26 aa a3 a3 2e 90 ff 07 c0 62 be d8 6e 3a 72 ad 6a 59 7b eb fc 33 ae e7 cb dc de 8f 10 80 58 7a 2c 5a 41 38 54 e7 df 2a [TRUNCATED] Data Ascii: PNGIHDR/kpHYs6iCCPPhotoshop ICC profilexJP@P+qpx((`-E!Ji^^~[wQpP@q!ruaakn:\|9Sn$+y;\|Ln @B0~A:i@<^/@)()A\|f\|03}0utjI:RgS-eI<e:dr?&.bn:rjY{3Xz,ZA8T*xoazR+V/OZOb:5iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/"
Jul 12, 2024 00:14:34.720259905 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 74 69 66 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 74 69 66 66 2f 31 2e 30 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 65 78 69 66 3d 22 68 74 74 70 Data Ascii: xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/"> <xmp:CreatorTool>Adobe Photoshop CC 2015 (Windows)</xmp:CreatorTool> <xmp:CreateDate>2016-10-20T12:49:57+03:00</xmp
Jul 12, 2024 00:14:34.720272064 CEST	1236	IN	Data Raw: 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3e 78 6d 70 2e 69 69 64 3a 61 61 64 37 30 65 62 30 2d 36 65 63 34 2d 39 33 34 32 2d 39 33 65 64 2d 30 64 31 31 61 63 31 38 64 Data Ascii: ion> <stEvt:instanceID>xmp.iid:aad70eb0-6ec4-9342-93ed-0d11ac18d709</stEvt:instanceID> <stEvt:when>2016-10-20T12:49:57+03:00</stEvt:when> <stEvt:softwareAgent>Adobe Photoshop CC 2015 (Windo
Jul 12, 2024 00:14:34.720341921 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Jul 12, 2024 00:14:34.720354080 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Jul 12, 2024 00:14:34.720366955 CEST	252	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Jul 12, 2024 00:14:34.844710112 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Jul 12, 2024 00:14:34.844722033 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Jul 12, 2024 00:14:34.844733000 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Jul 12, 2024 00:14:34.844794989 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Jul 12, 2024 00:14:34.844806910 CEST	896	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:
Jul 12, 2024 00:14:35.225584984 CEST	334	OUT	GET /images/ceo-r3.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Jul 12, 2024 00:14:35.445485115 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:35 GMT Content-Type: image/png Content-Length: 30375 Connection: keep-alive Last-Modified: Thu, 23 Jun 2016 13:38:15 GMT ETag: "1511a96-76a7-535f22a80dfc0" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b9 00 00 00 96 08 06 00 00 00 82 57 29 bf 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 01 36 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da ad 8e b1 4a c3 50 14 40 cf 8b a2 e2 50 2b 04 71 70 78 93 28 28 b6 ea 60 c6 a4 2d 45 10 ac d5 21 c9 d6 a4 a1 4a 69 12 5e 5e d5 7e 84 a3 5b 07 17 77 bf c0 c9 51 70 50 fc 02 ff 40 71 ea e0 10 21 83 83 08 9e e9 dc c3 e5 72 c1 a8 d8 75 a7 61 94 61 10 6b d5 6e 3a d2 f5 7c 39 fb c4 0c 53 00 d0 09 b3 d4 6e b5 0e 00 e2 24 8e f8 c1 e7 2b 02 e0 79 d3 ae 3b 0d fe c6 7c 98 2a 0d 4c 80 ed 6e 94 85 20 2a 40 ff 42 a7 1a c4 18 30 83 7e aa 41 dc 01 a6 3a 69 d7 40 3c 00 a5 5e ee 2f 40 29 c8 fd 0d 28 29 d7 f3 41 7c 00 66 cf f5 7c 30 e6 00 33 c8 7d 05 30 75 74 a9 01 6a 49 3a 52 67 bd 53 2d ab 96 65 49 bb 9b 04 91 3c 1e 65 3a 1a 64 72 3f 0e 13 95 26 aa a3 a3 2e 90 ff 07 c0 62 be d8 6e 3a 72 ad 6a 59 7b eb fc 33 ae e7 cb dc de 8f 10 80 58 7a 2c 5a 41 38 54 e7 df 2a [TRUNCATED] Data Ascii: PNGIHDRW)pHYs6iCCPPhotoshop ICC profilexJP@P+qpx((`-E!Ji^^~[wQpP@q!ruaakn:\|9Sn$+y;\|Ln @B0~A:i@<^/@)()A\|f\|03}0utjI:RgS-eI<e:dr?&.bn:rjY{3Xz,ZA8T*xoazR+V/OZOb:5iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/"
Jul 12, 2024 00:14:35.456315041 CEST	335	OUT	GET /images/marker2.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Jul 12, 2024 00:14:35.676054955 CEST	443	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:35 GMT Content-Type: image/png Content-Length: 194 Connection: keep-alive Last-Modified: Tue, 04 Sep 2012 09:19:07 GMT ETag: "1511eee-c2-4c8dcc008b8c0" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 08 00 00 00 08 08 06 00 00 00 c4 0f be 8b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 64 49 44 41 54 78 da 62 fc 7f 5f 8c 01 08 a4 81 b8 17 88 6d 18 20 e0 08 10 17 03 f1 53 46 a0 02 75 20 e3 18 10 0b 31 a0 82 77 40 6c cb 04 24 5a b0 48 32 40 c5 5a 40 26 7c 00 32 f8 19 b0 83 2f 4c 0c 04 00 48 c1 3e 3c f2 bb 41 56 68 01 19 87 f1 39 f2 1a 10 eb 01 f1 1a 20 7e 01 c5 6b a0 62 d7 00 02 0c 00 3e b9 18 f9 7d 1b af e8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<dIDATxb_m SFu 1w@l$ZH2@Z@&\|2/LH><AVh9 ~kb>}IENDB`
Jul 12, 2024 00:14:35.707992077 CEST	336	OUT	GET /images/tarif-r3.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Jul 12, 2024 00:14:35.927793026 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:35 GMT Content-Type: image/png Content-Length: 16263 Connection: keep-alive Last-Modified: Thu, 23 Jun 2016 12:26:38 GMT ETag: "1511a93-3f87-535f12a61db80" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 01 36 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da ad 8e b1 4a c3 50 14 40 cf 8b a2 e2 50 2b 04 71 70 78 93 28 28 b6 ea 60 c6 a4 2d 45 10 ac d5 21 c9 d6 a4 a1 4a 69 12 5e 5e d5 7e 84 a3 5b 07 17 77 bf c0 c9 51 70 50 fc 02 ff 40 71 ea e0 10 21 83 83 08 9e e9 dc c3 e5 72 c1 a8 d8 75 a7 61 94 61 10 6b d5 6e 3a d2 f5 7c 39 fb c4 0c 53 00 d0 09 b3 d4 6e b5 0e 00 e2 24 8e f8 c1 e7 2b 02 e0 79 d3 ae 3b 0d fe c6 7c 98 2a 0d 4c 80 ed 6e 94 85 20 2a 40 ff 42 a7 1a c4 18 30 83 7e aa 41 dc 01 a6 3a 69 d7 40 3c 00 a5 5e ee 2f 40 29 c8 fd 0d 28 29 d7 f3 41 7c 00 66 cf f5 7c 30 e6 00 33 c8 7d 05 30 75 74 a9 01 6a 49 3a 52 67 bd 53 2d ab 96 65 49 bb 9b 04 91 3c 1e 65 3a 1a 64 72 3f 0e 13 95 26 aa a3 a3 2e 90 ff 07 c0 62 be d8 6e 3a 72 ad 6a 59 7b eb fc 33 ae e7 cb dc de 8f 10 80 58 7a 2c 5a 41 38 54 e7 df 2a [TRUNCATED] Data Ascii: PNGIHDR22?pHYs6iCCPPhotoshop ICC profilexJP@P+qpx((`-E!Ji^^~[wQpP@q!ruaakn:\|9Sn$+y;\|Ln @B0~A:i@<^/@)()A\|f\|03}0utjI:RgS-eI<e:dr?&.bn:rjY{3Xz,ZA8T*xoazR+V/OZOb:3iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/"

Timestamp	Bytes transferred	Direction	Data
Jul 12, 2024 00:14:29.934434891 CEST	278	OUT	GET /inc/auth_ajax.js HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 12, 2024 00:14:30.624062061 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:30 GMT Content-Type: application/javascript Content-Length: 4259 Connection: keep-alive Last-Modified: Thu, 10 Mar 2016 10:52:17 GMT ETag: "158a429-10a3-52daf9b9f7a40" Accept-Ranges: bytes Data Raw: 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 5f 77 68 6f 69 73 28 29 7b 0a 09 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 77 68 6f 69 73 5f 64 6f 6d 61 69 6e 27 29 2e 76 61 6c 75 65 3b 0a 09 6a 51 75 65 72 79 2e 61 6a 61 78 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 65 3a 20 22 50 4f 53 54 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 3a 20 22 2f 69 6e 63 2f 70 72 6f 78 79 5f 77 68 6f 69 73 2e 70 68 70 22 2c 0a 09 09 64 61 74 61 3a 20 22 64 6f 6d 61 69 6e 3d 22 2b 64 6f 6d 61 69 6e 2c 0a 09 09 63 61 63 68 65 3a 20 66 61 6c 73 65 2c 0a 09 20 20 20 20 20 20 20 20 64 61 74 61 54 79 70 65 3a 22 78 6d 6c 22 2c 0a 09 20 20 20 20 20 20 20 20 73 75 63 63 65 73 73 3a 20 66 75 6e 63 74 69 6f 6e 28 64 61 74 61 29 20 7b 0a 09 09 09 69 66 20 28 24 28 64 61 74 61 29 2e 66 69 6e 64 28 27 73 74 61 74 75 73 27 29 2e 74 65 78 74 28 29 20 21 3d 20 22 66 72 65 65 22 29 7b 0a 09 09 09 09 6a 51 75 65 72 79 28 27 [TRUNCATED] Data Ascii: function check_whois(){var domain = document.getElementById('whois_domain').value;jQuery.ajax({ type: "POST", url: "/inc/proxy_whois.php",data: "domain="+domain,cache: false, dataType:"xml", success: function(data) {if ($(data).find('status').text() != "free"){jQuery('#whois_free').css("display", "none");jQuery('#whois_busy').css("display", "block");} else {jQuery('#whois_free').css("display", "block"); jQuery('#whois_busy').css("display", "none");}}});}function authExit() {jQuery.removeCookie('auth', { path: '/' });jQuery.removeCookie('data1', { path: '/' });jQuery.removeCookie('data2', { path: '/' });jQuery.removeCookie('authkey', { path: '/' }); checkcookie();}function keyScript(event) { if (event.which == 13 \|\| event.keyCode == 13) {jQuery('#login').click(); return false; } r
Jul 12, 2024 00:14:30.624100924 CEST	1236	IN	Data Raw: 65 74 75 72 6e 20 74 72 75 65 3b 0a 20 20 20 20 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 67 6f 74 6f 62 69 6c 6c 28 29 20 7b 0a 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 2e 61 6a 61 78 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 Data Ascii: eturn true; };function gotobill() { jQuery.ajax({ type: "GET", url: "/inc/proxy.php?auth=gotobill", cache: false,success: function(data){window.location=data;return false;}
Jul 12, 2024 00:14:30.624115944 CEST	1236	IN	Data Raw: 20 2f 2f 20 d0 9a d1 80 d0 b5 d0 b4 d0 b8 d1 82 d0 bd d1 8b d0 b9 20 d0 bb d0 b8 d0 bc d0 b8 d1 82 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 22 73 70 61 6e 23 65 6e 6f 75 67 68 64 61 79 73 22 Data Ascii: // jQuery("span#enoughdays").html(data.elem[0].enoughdays); // ... },error: function() {authExit();} });//func=user jQuery.ajax(
Jul 12, 2024 00:14:30.624130011 CEST	673	IN	Data Raw: 20 20 62 65 66 6f 72 65 53 65 6e 64 3a 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 27 23 75 73 65 72 66 6f 72 6d 27 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 20 22 6e 6f 6e 65 Data Ascii: beforeSend: function(){ jQuery('#userform').css("display", "none"); jQuery('#loader').css("display", "block"); jQuery('#usermenu').css("display", "none"); }, cache: fals
Jul 12, 2024 00:14:30.744002104 CEST	143	IN	Data Raw: 6c 6f 72 22 2c 20 22 72 65 64 22 29 3b 0a 09 09 7d 0a 09 09 63 68 65 63 6b 63 6f 6f 6b 69 65 28 29 3b 20 2f 2f 43 68 65 63 6b 20 63 6f 6f 6b 69 65 20 61 66 74 65 72 20 61 75 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 Data Ascii: lor", "red");}checkcookie(); //Check cookie after auth } }); });// return false; // prevent default });
Jul 12, 2024 00:14:30.747320890 CEST	278	OUT	GET /images/money.svg HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 12, 2024 00:14:30.963639975 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:30 GMT Content-Type: image/svg+xml Content-Length: 2338 Connection: keep-alive Last-Modified: Wed, 19 Oct 2016 21:57:31 GMT ETag: "1511ab5-922-53f3ee54b68c0" Accept-Ranges: bytes Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 20 50 55 42 4c 49 43 20 27 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 27 20 20 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 27 3e 3c 73 76 67 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 35 30 20 35 30 22 20 68 65 69 67 68 74 3d 22 35 30 70 78 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 20 35 30 22 20 77 69 64 74 68 3d 22 35 30 70 78 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 72 65 63 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><!DOCTYPE svg PUBLIC '-//W3C//DTD SVG 1.1//EN' 'http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd'><svg enable-background="new 0 0 50 50" height="50px" id="Layer_1" version="1.1" viewBox="0 0 50 50" width="50px" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><rect fill="none" height="50" width="50"/><ellipse cx="35" cy="6" fill="none" rx="14" ry="5" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/><path d=" M21,7c0,0.912,0,5.088,0,6c0,2.761,6.266,5,14,5s14-2.239,14-5c0-0.912,0-5.088,0-6" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/><path d=" M28.55,24.439C30.48,24.797,32.674,25,35,25c7.734,0,14-2.239,14-5c0-0.912,0-5.088,0-6" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/><path d=" M21,14c0,0.912
Jul 12, 2024 00:14:30.963668108 CEST	1236	IN	Data Raw: 2c 30 2c 34 2e 32 37 2c 30 2c 34 2e 32 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 30 30 30 30 30 30 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 Data Ascii: ,0,4.27,0,4.27" fill="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/><path d=" M29.025,31.523C30.837,31.829,32.862,32,35,32c7.734,0,14-2.238,14-5c0-0.912,0-5.088,0-6" fill="none"
Jul 12, 2024 00:14:30.963677883 CEST	121	IN	Data Raw: 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 30 30 30 30 30 30 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6d Data Ascii: ll="none" stroke="#000000" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" stroke-width="2"/></svg>
Jul 12, 2024 00:14:34.491112947 CEST	337	OUT	GET /images/brain-100.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Jul 12, 2024 00:14:34.704301119 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:34 GMT Content-Type: image/png Content-Length: 1299 Connection: keep-alive Last-Modified: Wed, 19 Oct 2016 21:57:45 GMT ETag: "1511ab4-513-53f3ee6210840" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 04 00 00 00 26 f7 70 e6 00 00 04 da 49 44 41 54 48 89 95 96 5b 6c 14 55 18 c7 ff bb 85 da 2e 95 8a 1c 22 ad e0 62 69 80 a9 96 8b 83 a2 a6 13 4d 90 36 7d 30 b5 a3 55 52 97 97 8a ab c1 88 f0 a0 35 6b 24 35 64 a4 41 93 8d a9 3e 6c 82 15 d2 90 70 c9 44 62 10 07 c5 6a 2b 28 89 83 01 a4 93 da 22 0e 97 5a c2 28 a1 d2 b1 94 b6 bb 7e 3b bb 9d ce ee 4e ed 36 27 3b b3 73 e6 9c df 7c e7 ff 5d ce 41 0c 6e cd f0 86 57 0a 4d e8 40 3f 86 d1 cf e4 70 59 b8 8c c9 89 27 74 08 4d e1 95 86 d7 7d a6 6b a7 5c e4 6f c5 20 fd d1 71 18 7b e8 37 82 2b d4 46 92 4f 3a bd 19 f4 b7 ca 45 59 02 e5 52 9c c7 90 7f 97 b4 6a bc 47 ac c7 18 c6 c4 fa f1 67 69 95 7f 17 86 70 5e 2e cd 02 28 17 fb ce 61 30 14 30 3c 13 7d ea fc b8 85 ea 7c 87 24 9e 50 00 83 be 73 72 f1 14 40 ad 80 6b 41 74 4b 6d 6a af 9a 8f 2e 74 a9 f9 a9 bd 5b 6a 11 e5 5a b4 82 49 81 72 21 bf d3 a7 e1 36 da 9d d6 c5 9b ee 61 a7 d8 29 3d ad d7 f0 a0 1d b7 7d 1a bf 53 2e 74 01 86 2a d1 87 db ec 38 bf [TRUNCATED] Data Ascii: PNGIHDR((&pIDATH[lU."biM6}0UR5k$5dA>lpDbj+("Z(~;N6';s\|]AnWM@?pY'tM}k\o q{7+FO:EYRjGgip^.(a00<}\|$Psr@kAtKmj.t[jZIr!6a)=}S.t8M^m8LJ=s-sC5RC\>{'Z.[g<7Ygl@T%s^CsL`a!Yt`QeGQ\|1AJ_h$F,(:eWrwhaT`PD,Rpg:%.:%v:@5{B(a4= 8B9>DPa$2X90qd4t+`uT5y5/<ma3]QN;Bt.Pz$o_-5bBjwQ,b>7L4#M_M;gOIrJ1*m3Ob\kUoV;l"OQ.?/)/$\|Mkh,0;0k)nE^fQ{g\|^-c/"MnlTwe#gB"-e@0:s3=e'>-u6hTAph&9JIuT
Jul 12, 2024 00:14:34.704344034 CEST	224	IN	Data Raw: 1b 58 82 eb 7c 8b e3 cb 4f 10 f0 45 17 a0 8e a3 a9 4b e6 5b 71 4d bd 2f 13 58 8e 61 be d1 f1 65 d2 35 22 b8 00 bf c3 95 78 46 38 80 8d b8 a5 3e 98 09 24 d3 b9 83 66 da f6 98 09 14 5e a1 88 78 cd b4 8f 25 66 0e b7 d7 d5 42 d3 4b f9 38 28 d6 4c 05 Data Ascii: X\|OEK[qM/Xae5"xF8>$f^x%fBK8(LT*YH@lrT25Ld1t7)is'FL/e#iUcB{kgYNF4HkT=}hSfnpU1~z$^\|="nD
Jul 12, 2024 00:14:34.831368923 CEST	90	IN	Data Raw: 09 aa 80 92 e9 7a 6c 77 05 92 4e 55 88 af b0 07 07 d1 8a ef e9 df af d4 a8 8e 60 1f 69 17 c5 80 b8 d5 7d de a4 40 d2 93 13 9a 71 92 d2 6a 04 97 d8 27 ca 42 65 21 fb 18 17 69 47 ec e2 3e 6c 5b 9e ee b4 89 f6 1f c1 49 e6 4b 1d ce f5 68 00 00 00 00 Data Ascii: zlwNU`i}@qj'Be!iG>l[IKhIENDB`
Jul 12, 2024 00:14:35.118535042 CEST	333	OUT	GET /images/offer.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Jul 12, 2024 00:14:35.332736969 CEST	370	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:35 GMT Content-Type: image/png Content-Length: 121 Connection: keep-alive Last-Modified: Tue, 04 Sep 2012 09:19:07 GMT ETag: "1511ee2-79-4c8dcc008b8c0" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 0a 08 06 00 00 00 8d 32 cf bd 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 1b 49 44 41 54 78 da 62 64 60 60 f0 65 20 02 30 31 10 09 46 15 52 47 21 40 80 01 00 8b bc 00 61 55 4a 79 8b 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR2tEXtSoftwareAdobe ImageReadyqe<IDATxbd``e 01FRG!@aUJyIENDB`
Jul 12, 2024 00:14:35.423630953 CEST	336	OUT	GET /images/panel-r3.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Jul 12, 2024 00:14:35.638591051 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:35 GMT Content-Type: image/png Content-Length: 16805 Connection: keep-alive Last-Modified: Thu, 23 Jun 2016 12:23:03 GMT ETag: "1511a8e-41a5-535f11d9137c0" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 01 36 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da ad 8e b1 4a c3 50 14 40 cf 8b a2 e2 50 2b 04 71 70 78 93 28 28 b6 ea 60 c6 a4 2d 45 10 ac d5 21 c9 d6 a4 a1 4a 69 12 5e 5e d5 7e 84 a3 5b 07 17 77 bf c0 c9 51 70 50 fc 02 ff 40 71 ea e0 10 21 83 83 08 9e e9 dc c3 e5 72 c1 a8 d8 75 a7 61 94 61 10 6b d5 6e 3a d2 f5 7c 39 fb c4 0c 53 00 d0 09 b3 d4 6e b5 0e 00 e2 24 8e f8 c1 e7 2b 02 e0 79 d3 ae 3b 0d fe c6 7c 98 2a 0d 4c 80 ed 6e 94 85 20 2a 40 ff 42 a7 1a c4 18 30 83 7e aa 41 dc 01 a6 3a 69 d7 40 3c 00 a5 5e ee 2f 40 29 c8 fd 0d 28 29 d7 f3 41 7c 00 66 cf f5 7c 30 e6 00 33 c8 7d 05 30 75 74 a9 01 6a 49 3a 52 67 bd 53 2d ab 96 65 49 bb 9b 04 91 3c 1e 65 3a 1a 64 72 3f 0e 13 95 26 aa a3 a3 2e 90 ff 07 c0 62 be d8 6e 3a 72 ad 6a 59 7b eb fc 33 ae e7 cb dc de 8f 10 80 58 7a 2c 5a 41 38 54 e7 df 2a [TRUNCATED] Data Ascii: PNGIHDR22?pHYs6iCCPPhotoshop ICC profilexJP@P+qpx((`-E!Ji^^~[wQpP@q!ruaakn:\|9Sn$+y;\|Ln @B0~A:i@<^/@)()A\|f\|03}0utjI:RgS-eI<e:dr?&.bn:rjY{3Xz,ZA8T*xoazR+V/OZOb:3iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/"
Jul 12, 2024 00:14:35.638606071 CEST	224	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 74 69 66 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 74 69 66 66 2f 31 2e 30 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 65 78 69 66 3d 22 68 74 74 70 Data Ascii: xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/"> <xmp:CreatorTool>Adobe Photoshop CC 2015 (Windows)</xmp:CreatorTool> <xmp:CreateDate>2016-06-23T
Jul 12, 2024 00:14:35.638626099 CEST	1236	IN	Data Raw: 31 35 3a 32 33 3a 30 31 2b 30 33 3a 30 30 3c 2f 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3e 32 30 31 36 2d 30 36 2d 32 33 54 31 35 3a 32 33 3a 30 31 2b 30 33 3a Data Ascii: 15:23:01+03:00</xmp:CreateDate> <xmp:MetadataDate>2016-06-23T15:23:01+03:00</xmp:MetadataDate> <xmp:ModifyDate>2016-06-23T15:23:01+03:00</xmp:ModifyDate> <xmpMM:InstanceID>xmp.iid:821e7051-e3f9-3840-971b-834f6dfa7a6f
Jul 12, 2024 00:14:38.783951998 CEST	357	OUT	GET /images/l2_wordpress-logo.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Jul 12, 2024 00:14:39.001857042 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:38 GMT Content-Type: image/png Content-Length: 3902 Connection: keep-alive Last-Modified: Thu, 24 Mar 2016 18:54:41 GMT ETag: "15118d9-f3e-52ecffa991e40" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 0e f0 49 44 41 54 58 85 9d 59 69 90 5c d5 75 3e f7 de b7 f5 32 fd 5e ef 3d 1a cd 68 9b 4d 33 da d0 6a 10 20 b0 30 9b 89 0d 52 8c 21 71 ca a9 ac ae 10 5c 8e 03 b6 8b c4 ce 0f 51 89 49 9c c2 d8 29 e3 40 d9 89 5d c1 09 d8 31 c8 46 20 1b 11 2f 62 d1 48 8c 18 ad b3 48 20 cd 3e bd bc 9e ee 7e 3d dd af fb dd 25 3f fa bd 99 d6 18 90 93 5b f5 aa 7a ba df 3d f7 3b e7 fb ce b9 e7 de 41 f0 db 0d 84 10 22 42 08 06 00 02 00 90 ae eb d7 24 e2 d1 3b f5 90 be 53 f3 69 1d 12 21 41 00 24 37 5e 17 94 31 56 ae da b5 c9 62 b1 78 22 67 9a 2f 15 0a c5 41 21 04 7f 0f 5b 1f bc f0 6f 81 8c 00 80 10 42 70 55 55 a2 1d ed ed 9f 49 c4 e3 f7 60 8c 15 ab 5c 3e 57 2c 16 07 2c ab 7c b6 66 db 53 75 4a 4b 00 00 b2 24 b5 68 9a d6 16 0c 06 36 18 86 be 33 18 0c 6e 04 21 58 26 9b fb c9 f8 c4 e4 93 b5 5a 2d 8d 10 c2 00 80 5c a0 ff bf e1 82 03 89 10 7f 6f 4f f7 63 7b 6f da 33 [TRUNCATED] Data Ascii: PNGIHDR((mpHYs~IDATXYi\u>2^=hM3j 0R!q\QI)@]1F /bHH >~=%?[z=;A"B$;Si!A$7^1Vbx"g/A![oBpUUI`\>W,,\|fSuJK$h63n!X&Z-\oOc{o3mc+#FUU[l~n{>.RAz<h<,khxxsPK";l}>,QB&5+Bz&}X*\|{9l=?tE~@Bu}_>sLEimM_y=AsBp #c`R:995sniffg~x!7 \|9%v;{{;9R\h9p$$4,;wl;b}A^atMhj[{8s:;RwG9d OL~}dtsgPJ'ipNBG`7'(PJB_y!Y#~`[T5q!sHs](}hVUT"W/UNoKpZtt}jU>7]B_?w~Z>nk:SBCs$aB0n!O8',M<

Timestamp	Bytes transferred	Direction	Data
Jul 12, 2024 00:14:30.134797096 CEST	277	OUT	GET /images/logo.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 12, 2024 00:14:30.829061031 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:30 GMT Content-Type: image/png Content-Length: 8239 Connection: keep-alive Last-Modified: Fri, 04 Mar 2016 10:42:43 GMT ETag: "1511ee4-202f-52d36c65caec0" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d2 00 00 00 6c 08 06 00 00 00 1f 59 ec 47 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0d 12 00 00 0d 3a 01 e8 dd 99 de 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 1f ac 49 44 41 54 78 9c ed 9d 77 78 14 d5 fa c7 3f b3 35 95 6c 42 48 48 20 09 09 bd 83 82 97 8b 05 14 04 ae a8 14 7f 82 88 8a 51 14 15 44 44 2e 58 ae 97 eb d5 2b 22 0a 2a a0 14 69 82 08 28 08 28 28 48 15 e9 bd d7 48 42 12 02 e9 3d 5b e7 fc fe 58 b2 b0 a4 b0 d9 6c 24 81 f9 3c cf 26 4f 26 e7 9c 79 77 e6 7c e7 bc 73 ca 7b 24 21 84 40 41 41 a1 52 a8 6e b6 01 0a 0a b7 02 8a 90 14 14 3c 80 22 24 05 05 0f a0 08 49 41 c1 03 28 42 52 50 f0 00 8a 90 14 14 3c 80 22 24 05 05 0f a0 08 49 41 c1 03 28 42 52 50 f0 00 8a 90 14 14 3c 80 22 24 05 05 0f a0 08 49 41 c1 03 28 42 52 50 f0 00 8a 90 14 14 3c 80 22 24 05 05 0f a0 71 27 53 4e 6e 21 1f 7f b6 9a 8d 5b 8f 91 93 5b 48 55 2d 69 d2 69 35 f8 fb [TRUNCATED] Data Ascii: PNGIHDRlYGsBIT\|dpHYs:tEXtSoftwareAdobe ImageReadyqe<IDATxwx?5lBHH QDD.X+"i(((HHB=[Xl$<&O&yw\|s{$!@AARn<"$IA(BRP<"$IA(BRP<"$IA(BRP<"$q'SNn![[HU-ii5{\:4kNh2}so!~t74]6'mr,lmm[<mG8x^RsDryAdn!kTyr=lni+I~q3XrgRz,o-ps)6RBXtNY`.A&NYqn[RH\|}o)(\Oi]$!dW[B]L!d228\|,V"ka.\1!6sQ-mmOGol~F}.c)s0ACDO$9s.w`<<`"&gqdwwjI&qA9jmwM.9y:u!I*u35n`T8}JEz\NY((QA~\r)}~-R(YQd4Qd4a6[e;Z"n0>^7J
Jul 12, 2024 00:14:30.829106092 CEST	1236	IN	Data Raw: 50 e3 84 04 f6 b1 26 57 51 06 65 ab 1e 59 96 49 4e 49 23 3e 21 85 3f 13 92 49 4a be 4c 4a 4a 3a a9 e9 d9 64 66 e5 52 58 68 c4 6c b6 61 b1 ca 14 cf 1e 91 54 2a 22 eb 07 f3 fe 3b c3 68 db ba 71 a9 e5 66 64 e6 90 5f 50 e4 f8 5b 08 81 5a a5 a2 76 ed Data Ascii: P&WQeYINI#>!?IJLJJ:dfRXhlaT";hqfd_P[ZvJP-Vzl[rz//G*0[,:r?vd_D~EjmleP;21s<lY\|1c)Wm@ !!$@<vgf2='Z@pg
Jul 12, 2024 00:14:30.829138994 CEST	448	IN	Data Raw: ae de 53 85 16 29 28 94 4f b5 14 92 21 c0 97 57 86 f6 ac 50 9e 89 9f ad 72 39 94 b1 82 82 a7 a9 96 42 02 18 fa cc fd 34 8c 76 7d 51 de 9f f1 a9 2c 59 be a3 0a 2d 52 50 28 9b 6a 2b 24 1f 1f 3d 23 5f fa 47 85 f2 4c f9 72 2d d9 39 ca d6 95 b7 03 f6 Data Ascii: S)(O!WPr9B4v}Q,Y-RP(j+$=#_GLr-9UgZlXgf/.OJ`->gmviT8c7j1#B+:oS]3co<]]%o@B0+Q~JktlV.] A_o`)T[^q
Jul 12, 2024 00:14:30.829175949 CEST	1236	IN	Data Raw: f1 d9 f4 b5 ee 9d 6c d3 64 28 72 3d 24 72 4d 40 96 05 e3 27 cc 62 d9 8f 3b 38 7e aa 88 a4 64 0d 17 2f 69 49 b9 a4 e5 42 a2 9a 7d 07 33 98 f4 f9 12 56 fe bc e5 66 9b 0a 80 4e ab a5 4d ab 46 78 79 c9 a5 ba 76 92 04 45 26 89 e4 8b 32 af bf 39 85 85 Data Ascii: ld(r=$rM@'b;8~d/iIB}3VfNMFxyvE&29KS2M=E*13{VK^)lv,-PPB?mO.bj;)QIf>;,^KQ!&\|RS3IJI'1)"B#
Jul 12, 2024 00:14:30.829210997 CEST	225	IN	Data Raw: c5 5f 48 e3 c0 e1 f3 a4 a6 e5 94 99 e6 d4 99 64 f6 ee 8f ab 76 ab 2f 15 14 aa 02 b7 85 f4 60 9f 0f e8 fb e4 27 14 15 95 14 ca ce 3d 67 b8 a7 e7 78 fe f7 c9 8f 95 36 50 41 a1 26 e0 96 90 ba de d3 82 57 87 f5 e2 e4 e9 64 26 4f 5f e3 f4 bf fc 7c 23 Data Ascii: _Hdv/`'=gx6PA&Wd&O_\|#\NaGUHHoM9r+9s.u{mpR`m6~]{&\|+vpX^!yYhfY5#w
Jul 12, 2024 00:14:30.953717947 CEST	1236	IN	Data Raw: c0 7d 2d 01 f8 7a c1 26 92 2e 66 00 a0 52 a9 d0 6a d5 98 cd 56 c7 dc af 3b da c6 d0 f5 de 16 4c 9f bd 8e 6e 5d 5a 39 45 21 4a 4d cf 65 ee c2 cd e8 b4 6a 5e 7a ee 41 7c 7c f4 ac 5e bb 9f b8 f3 97 18 fe 62 4f 74 da ab f3 78 2f a6 64 b1 e0 bb ad 3c Data Ascii: }-z&.fRjV;Ln]Z9E!JMej^zA\|\|^bOtx/d<x:!5-`]^w}Lb1MgafFGCgu-y6s)5NZA~}{YyZt:auFf5#YJx},]c4oZ7{3
Jul 12, 2024 00:14:30.953788042 CEST	1236	IN	Data Raw: bc 22 a7 32 2d 16 9b 10 42 88 21 c3 a6 0b 43 44 ac 98 bb 68 b3 a3 9c ec 9c 02 f1 cc b0 69 c2 10 11 2b 56 fc b4 a7 dc eb 57 1a 95 1e 47 d2 69 35 74 b9 c7 be f5 64 50 a0 2f dd ef 6f 5d 22 cd dc 45 5b 90 24 89 29 13 9e 21 a4 ce d5 a7 6c ef 9e 77 30 Data Ascii: "2-B!CDhi+VWGi5tdP/o]"E[$)!lw0twG)2t~Wt#1,;Bh4OLj5cju_{<$1U )Z]2eVjV%IIY?)bxJBG?0wf\|4
Jul 12, 2024 00:14:30.953824997 CEST	1236	IN	Data Raw: 1b 96 73 3d 6e b7 48 c7 4f 26 f2 fe c7 cb 69 db 2a 8a 31 23 1f 01 ec fe f3 7f df 19 40 6a 7a 2e a3 df 5e e8 48 db ad 6b 2b 52 d3 73 59 b1 7a 77 89 72 16 2e f9 1d ad 46 4d a7 0e 8d a9 5f 2f 88 a0 40 3f 96 af da 5d a2 eb f2 c7 9f f6 30 62 cc 5c e2 Data Ascii: s=nHO&i*1#@jz.^Hk+RsYzwr.FM_/@?]0b\_vFI8\|,+B!J7-en<LHp-:xkc]Hw7nvrg@AeGC\|eY#(:7}iFHS;$r\;Y3O`p:K&X
Jul 12, 2024 00:14:30.953859091 CEST	402	IN	Data Raw: 13 52 1d 7f df 88 4d bf 1f e7 b1 a7 3e e5 cb c9 cf 97 e8 f6 2d e6 cc b9 4b 0c 79 69 3a 9f 4f 7c 96 46 31 75 31 04 f8 94 fa 0e 98 7c 31 93 c2 22 33 8d 62 42 39 f7 e7 65 ac 56 1b 31 0d 42 4a 84 be 4a 48 4c c7 66 93 89 69 50 76 c7 46 59 df d7 66 93 Data Ascii: RM>-Kyi:O\|F1u1\|1"3bB9eV1BJJHLfiPvFYf9s.JrTc'^Kf$+]{(&y}KY,[%:?p&_U{D*WPbrFF1FJM$5UTTlrT"b}gLS<p\@g_XW
Jul 12, 2024 00:14:34.496505976 CEST	337	OUT	GET /images/money-all.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Jul 12, 2024 00:14:34.718023062 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:34 GMT Content-Type: image/png Content-Length: 16346 Connection: keep-alive Last-Modified: Thu, 20 Oct 2016 09:43:40 GMT ETag: "1511aba-3fda-53f48c2af0b00" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 04 00 00 00 26 f7 70 e6 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 03 15 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da ad d0 7d 4c 8c 01 00 06 f0 e7 7d af eb fa ae ab ab 14 d5 db e5 a8 48 1f 0a 51 71 d5 d5 89 38 17 ea 1a d1 7d b8 12 dd db dd 5b 8a 7c 44 3e 22 7d 11 62 14 15 f9 56 32 33 b2 10 ed ac 49 f2 d5 ac 11 cd 22 33 92 46 49 fe 60 b3 f1 97 cd ef af 67 cf 3f cf f6 00 ac 22 61 78 a8 88 b4 02 68 2d a3 8d 94 0a 65 71 b2 78 8a d3 0a 43 b0 00 00 48 54 e8 68 a1 44 32 17 00 52 35 a9 2a fc 65 e0 31 08 00 68 f7 12 86 87 8a f0 6f d8 0a 5a cb 00 68 04 e0 a7 54 e9 14 00 fa 01 a8 d7 30 34 03 10 4b 00 f0 e4 29 34 03 10 34 00 5e ca 42 69 18 40 e4 02 a4 19 a3 ca 64 00 20 4c 43 67 69 93 d5 49 0c e5 1b 18 18 48 09 95 1a b9 8a 8a c9 d2 31 aa d5 3a 6a 76 aa 42 a3 a5 35 da 44 46 a5 04 f0 6b 03 00 cc c3 35 0c 15 99 98 9c 4a f9 05 08 f0 9f c5 c9 e2 a9 3f ff f9 dd fd a6 48 d7 66 [TRUNCATED] Data Ascii: PNGIHDR((&ppHYsiCCPPhotoshop ICC profilex}L}HQq8}[\|D>"}bV23I"3FI`g?"axh-eqxCHThD2R5e1hoZhT04K)44^Bi@d LCgiIH1:jvB5DFk5J?HfLXfAbE-n]HI"I9%abvJya>Sj1~jlRmjiyyD\|+wu(^2oN``g?chcNN-]]R9_cX`ho\|Gg /Iw+}6D=S6N^6((/87$gY92QUDmdmvwhyrIJEbq{eMx,MH(]h"+++W)Whf3pofqun,49iQvL;Kz9XPjnM_9qc9]>wE~ZFM;mvc=~tIqgNsz}uaO[;\|_8%G[4:/iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
Jul 12, 2024 00:14:34.718050003 CEST	1236	IN	Data Raw: 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e Data Ascii: "Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:x
Jul 12, 2024 00:14:34.718063116 CEST	1236	IN	Data Raw: 20 20 20 20 3c 72 64 66 3a 6c 69 20 72 64 66 3a 70 61 72 73 65 54 79 70 65 3d 22 52 65 73 6f 75 72 63 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 61 63 74 69 6f 6e 3e 63 72 65 61 74 65 64 3c 2f 73 74 45 Data Ascii: <rdf:li rdf:parseType="Resource"> <stEvt:action>created</stEvt:action> <stEvt:instanceID>xmp.iid:02bb2053-36f3-ed4c-8acd-e4b768b0c722</stEvt:instanceID> <stEvt:when>2016-10-20T12:43:39+
Jul 12, 2024 00:14:35.125627041 CEST	337	OUT	GET /images/btn_green.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Jul 12, 2024 00:14:35.345520973 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:35 GMT Content-Type: image/png Content-Length: 2876 Connection: keep-alive Last-Modified: Tue, 04 Sep 2012 09:19:06 GMT ETag: "1511eea-b3c-4c8dcbff97680" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 03 00 00 00 36 08 06 00 00 00 02 9f 23 a1 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b 08 80 14 00 40 7a 8e 42 a6 00 40 46 01 80 9d 98 26 53 00 a0 04 00 60 cb 63 62 e3 00 50 2d 00 60 27 7f e6 d3 00 80 9d f8 99 7b 01 00 5b 94 21 15 01 a0 91 00 20 13 65 88 44 00 68 3b 00 ac cf 56 8a 45 00 58 30 00 14 66 4b c4 39 00 d8 2d 00 30 49 57 66 [TRUNCATED] Data Ascii: PNGIHDR6#pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K@zB@F&S`cbP-`'{[! eDh;VEX0fK9-0IWfH0Q){`##xFW<+x<$9E[-qWW.(I+6aa@.y24x6_-"bbp@t~,/;m%h^uf@Wp~<<EJB[aW}g_Wl~<$2]GLbG"IbXQqD2"B)%d,>5j>{-]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(*`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0.B8,c"VcwE6wB aAHXLXNH $47Q'"K&b21XH,#/{C7$C2'ITFnR#,
Jul 12, 2024 00:14:35.422061920 CEST	335	OUT	GET /images/spec-r3.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074
Jul 12, 2024 00:14:35.643464088 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:35 GMT Content-Type: image/png Content-Length: 16619 Connection: keep-alive Last-Modified: Thu, 23 Jun 2016 12:21:24 GMT ETag: "1511a91-40eb-535f117aa9900" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 01 36 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da ad 8e b1 4a c3 50 14 40 cf 8b a2 e2 50 2b 04 71 70 78 93 28 28 b6 ea 60 c6 a4 2d 45 10 ac d5 21 c9 d6 a4 a1 4a 69 12 5e 5e d5 7e 84 a3 5b 07 17 77 bf c0 c9 51 70 50 fc 02 ff 40 71 ea e0 10 21 83 83 08 9e e9 dc c3 e5 72 c1 a8 d8 75 a7 61 94 61 10 6b d5 6e 3a d2 f5 7c 39 fb c4 0c 53 00 d0 09 b3 d4 6e b5 0e 00 e2 24 8e f8 c1 e7 2b 02 e0 79 d3 ae 3b 0d fe c6 7c 98 2a 0d 4c 80 ed 6e 94 85 20 2a 40 ff 42 a7 1a c4 18 30 83 7e aa 41 dc 01 a6 3a 69 d7 40 3c 00 a5 5e ee 2f 40 29 c8 fd 0d 28 29 d7 f3 41 7c 00 66 cf f5 7c 30 e6 00 33 c8 7d 05 30 75 74 a9 01 6a 49 3a 52 67 bd 53 2d ab 96 65 49 bb 9b 04 91 3c 1e 65 3a 1a 64 72 3f 0e 13 95 26 aa a3 a3 2e 90 ff 07 c0 62 be d8 6e 3a 72 ad 6a 59 7b eb fc 33 ae e7 cb dc de 8f 10 80 58 7a 2c 5a 41 38 54 e7 df 2a [TRUNCATED] Data Ascii: PNGIHDR22?pHYs6iCCPPhotoshop ICC profilexJP@P+qpx((`-E!Ji^^~[wQpP@q!ruaakn:\|9Sn$+y;\|Ln @B0~A:i@<^/@)()A\|f\|03}0utjI:RgS-eI<e:dr?&.bn:rjY{3Xz,ZA8T*xoazR+V/OZOb:3iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/"
Jul 12, 2024 00:14:38.783670902 CEST	348	OUT	GET /images/icon_yes.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Jul 12, 2024 00:14:39.008198977 CEST	559	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:38 GMT Content-Type: image/png Content-Length: 309 Connection: keep-alive Last-Modified: Thu, 20 Oct 2016 11:05:34 GMT ETag: "1511ac0-135-53f49e794bb80" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0c 00 00 00 0c 08 06 00 00 00 56 75 5c e7 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 d7 49 44 41 54 78 da 62 fc ff ff 3f 03 29 80 a5 6a 73 36 31 ea 60 a6 32 32 11 a3 58 d6 59 81 01 84 41 6c 16 10 d9 e6 3b 15 ab 4a a0 ed ff 25 1d 64 19 fe fc fd cb 60 c0 6a c8 f0 98 e1 01 03 4e 1b 40 8a 45 6c 24 18 7e ff f9 cd a0 c3 ac c7 b0 7d f7 26 84 93 40 92 20 8c ac 98 d7 5c 88 e1 e7 ef 5f 0c ba ac fa 0c bb f7 6e 05 b9 82 11 ec 69 90 bb d8 0c 79 e0 0a 41 34 88 ff f3 d7 2f 06 73 5e 73 86 fd fb 77 c2 15 83 00 d8 06 43 2e 43 a0 69 3f 19 fe eb b0 82 31 88 0d 12 3b 7c 68 2f 8a 62 98 06 c6 93 47 0f 33 18 f3 18 83 9d 00 c2 20 36 48 0c 5d 31 dc 06 90 c4 b9 13 27 18 cc f8 4c c1 18 c4 c6 a6 18 ec eb ca 4d 59 58 23 08 57 e8 31 92 9a 34 00 02 0c 00 03 3a 5c 75 ce e4 d2 af 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRVu\tEXtSoftwareAdobe ImageReadyqe<IDATxb?)js61`22XYAl;J%d`jN@El$~}&@ \_niyA4/s^swC.Ci?1;\|h/bG3 6H]1'LMYX#W14:\uIENDB`
Jul 12, 2024 00:14:39.025851011 CEST	354	OUT	GET /images/l2_joomla_logo.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2
Jul 12, 2024 00:14:39.470504045 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:39 GMT Content-Type: image/png Content-Length: 3508 Connection: keep-alive Last-Modified: Thu, 24 Mar 2016 18:54:56 GMT ETag: "15118d7-db4-52ecffb7e0000" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 02 00 00 00 03 9c 2f 3a 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 0d 66 49 44 41 54 58 85 9d 58 69 94 54 d5 b5 fe f6 39 f7 d6 5c 5d 3d 42 03 dd 80 d2 40 37 0d 76 33 8b 82 28 51 31 4f 45 8d 98 e0 90 20 59 cb 38 60 7c e6 49 b2 44 8c 0a 8b bc 67 f2 9e c3 93 98 e8 73 c0 59 44 54 d4 88 03 8d c2 53 48 8b 88 28 08 32 5a dd 34 3d d0 55 d5 35 de 1a ee 3d 67 bf 1f d5 4c 3e fd e3 5e b5 ee b0 ee 59 e7 3b 7b 9f 6f 7f fb ec 22 66 d6 ac 04 c9 48 e6 c8 86 fd af f4 a4 da 00 1a 5b 3d 6d c6 e9 97 9b d2 cd ac 89 04 7e 84 31 83 00 66 fe 66 1d 87 b7 40 3b 14 ac a6 b1 57 a0 fc 34 b0 06 09 52 5a 09 12 1f 1d 78 75 ed ae bf 37 0e 9c 3a ac bc 21 53 48 6e 3b bc 21 ef 64 7f 37 f3 af 35 a1 ba 1f 83 cd 0c 22 24 bb f4 3b bf 07 2b d4 9d 07 57 00 89 c3 38 f4 09 8d fd 19 4d 5e 00 d6 c4 cc ff 6c 5b f7 64 eb 92 5f 4f b9 67 58 d9 68 47 db 82 04 b3 7e 63 e7 e3 3b bb 5b 1f 98 f3 5e a9 77 80 a3 1d 22 22 80 48 10 e8 07 c0 34 98 8b 4f 10 06 [TRUNCATED] Data Ascii: PNGIHDR((/:pHYs~fIDATXXiT9\]=B@7v3(Q1OE Y8`\|IDgsYDTSH(2Z4=U5=gL>^Y;{o"fH[=m~1ff@;W4RZxu7:!SHn;!d75"$;+W8M^l[d_OgXhG~c;[^w""H4Oz" 4TYL_CnuM 0A}).?8f]\H@D'^WgO7 V pW"e=;2fu\|6lDV^1?`Z3GqSH\|nbD2]C$$S^0'jKG^>Q @Z6#\|tn4X#qp^ARC "!""ES>tAw/~YfOWrxrI;fDpQUJ<V!%c-UH@K=h]<y;Ku ,m@:O_OebqwLj&rG]E$IqJpXy_{4g?4d2Mr86J!7&2GqU&f\|<1nYiJ9d}N{pM0C+8YxB(XXl[spA^bfv=~(&3JyMz!?>f7+o-vt{7ij;i`#
Jul 12, 2024 00:14:39.502530098 CEST	371	OUT	GET /images/r3-hosting-circle.png HTTP/1.1 Host: www.r3.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1720736074913578627; _ym_d=1720736074; _ym_isad=2; _ym_visorc=w
Jul 12, 2024 00:14:39.724901915 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.4.1 Date: Thu, 11 Jul 2024 22:14:39 GMT Content-Type: image/png Content-Length: 25603 Connection: keep-alive Last-Modified: Sat, 02 Jul 2016 17:03:49 GMT ETag: "1512187-6403-536aa163d2740" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ae 00 00 00 b0 08 06 00 00 00 96 d0 55 05 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 3b 6d 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 0a 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f [TRUNCATED] Data Ascii: PNGIHDRUpHYs;miTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/"> <xmp:CreatorTool>Adobe Photoshop CC 2015 (Windows)</xmp:CreatorTool> <xmp:CreateDate>2016-07-02T19:48:11+03:00</xmp:CreateDate> <xmp:ModifyDate>2016-07-02T20:03:46+03:00</xmp:ModifyDate

Timestamp	Bytes transferred	Direction	Data
Jul 12, 2024 00:14:41.686208963 CEST	433	OUT	GET / HTTP/1.1 Host: steamcommunity.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 12, 2024 00:14:42.331182957 CEST	174	IN	HTTP/1.1 302 Moved Temporarily Server: AkamaiGHost Content-Length: 0 Location: https://steamcommunity.com/ Date: Thu, 11 Jul 2024 22:14:42 GMT Connection: keep-alive
Jul 12, 2024 00:15:27.334016085 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Jul 12, 2024 00:14:53.685060024 CEST	437	OUT	GET / HTTP/1.1 Host: store.steampowered.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 12, 2024 00:14:54.460314989 CEST	337	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Content-Type: text/html Content-Length: 138 Location: https://store.steampowered.com/ Date: Thu, 11 Jul 2024 22:14:54 GMT Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>
Jul 12, 2024 00:15:11.700223923 CEST	476	OUT	GET /about/ HTTP/1.1 Host: store.steampowered.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: timezoneOffset=-14400,0
Jul 12, 2024 00:15:12.073364973 CEST	343	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Content-Type: text/html Content-Length: 138 Location: https://store.steampowered.com/about/ Date: Thu, 11 Jul 2024 22:15:11 GMT Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>
Jul 12, 2024 00:15:26.130785942 CEST	475	OUT	GET /news/ HTTP/1.1 Host: store.steampowered.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: timezoneOffset=-14400,0
Jul 12, 2024 00:15:26.471739054 CEST	342	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Content-Type: text/html Content-Length: 138 Location: https://store.steampowered.com/news/ Date: Thu, 11 Jul 2024 22:15:26 GMT Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-07-11 22:14:16 UTC	563	OUT	GET /public/css/skin_1/global.css HTTP/1.1 Host: steamcommunity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://steamcomunity.aiq.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 22:14:17 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 Cache-Control: public,max-age=952,must-revalidate Expires: Thu, 11 Jul 2024 22:16:00 GMT ETag: "uU_KcUiSe7pP" Date: Thu, 11 Jul 2024 22:14:17 GMT Content-Length: 16906 Connection: close
2024-07-11 22:14:17 UTC	16120	IN	Data Raw: 0d 0a 0d 0a 62 6f 64 79 20 7b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 30 2e 37 35 65 6d 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 62 32 38 33 38 3b 0d 0a 09 63 6f 6c 6f 72 3a 23 38 46 39 38 41 30 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0d 0a 09 6d 61 72 67 69 6e 3a 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0d 0a 0d 0a 09 73 63 72 6f 6c 6c 62 61 72 2d 74 72 61 63 6b 2d 63 6f 6c 6f 72 3a 23 32 63 32 63 32 63 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2c 20 74 65 78 74 61 72 65 61 20 7b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 66 6c 61 74 5f 70 61 67 65 20 7b Data Ascii: body {font-size:0.75em;background-color:#1b2838;color:#8F98A0;text-align:center;margin:0;padding:0;scrollbar-track-color:#2c2c2c;}body, textarea {font-family:Arial, Helvetica, Verdana, sans-serif;}body.flat_page {
2024-07-11 22:14:17 UTC	786	IN	Data Raw: 65 79 3a 68 6f 76 65 72 20 2e 62 74 6e 5f 6c 65 66 74 2c 20 2e 62 74 6e 5f 64 67 72 65 79 3a 68 6f 76 65 72 20 2e 62 74 6e 5f 6c 65 66 74 2c 20 2e 62 74 6e 5f 67 72 65 65 6e 3a 68 6f 76 65 72 20 2e 62 74 6e 5f 6c 65 66 74 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 74 6f 70 20 6c 65 66 74 3b 0d 0a 7d 0d 0a 2e 62 74 6e 5f 67 72 65 79 3a 68 6f 76 65 72 20 2e 62 74 6e 5f 72 69 67 68 74 2c 20 2e 62 74 6e 5f 64 67 72 65 79 3a 68 6f 76 65 72 20 2e 62 74 6e 5f 72 69 67 68 74 2c 20 2e 62 74 6e 5f 67 72 65 65 6e 3a 68 6f 76 65 72 20 2e 62 74 6e 5f 72 69 67 68 74 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 74 6f 70 20 72 69 67 68 74 3b 0d 0a 7d 0d 0a 2f 2a 0d 0a 2e 62 74 6e 5f 72 6f 20 7b 0d 0a 09 62 61 Data Ascii: ey:hover .btn_left, .btn_dgrey:hover .btn_left, .btn_green:hover .btn_left {background-position:top left;}.btn_grey:hover .btn_right, .btn_dgrey:hover .btn_right, .btn_green:hover .btn_right {background-position:top right;}/*.btn_ro {ba

Timestamp	Bytes transferred	Direction	Data
2024-07-11 22:14:16 UTC	561	OUT	GET /public/css/skin_1/home.css HTTP/1.1 Host: steamcommunity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://steamcomunity.aiq.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 22:14:17 UTC	265	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 Cache-Control: public,max-age=1089,must-revalidate Expires: Thu, 11 Jul 2024 22:32:25 GMT ETag: "pTH-Ya7jG3VB" Date: Thu, 11 Jul 2024 22:14:17 GMT Content-Length: 14878 Connection: close
2024-07-11 22:14:17 UTC	14878	IN	Data Raw: 0d 0a 23 6d 61 69 6e 42 6f 64 79 20 7b 0d 0a 09 6d 61 78 2d 77 69 64 74 68 3a 39 35 38 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 0d 0a 7d 0d 0a 0d 0a 23 75 73 65 72 4e 75 6d 62 65 72 73 20 7b 0d 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 0d 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 33 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 23 34 64 34 64 34 64 3b 0d 0a 7d 0d 0a 0d 0a 23 69 54 6f 74 61 6c 41 63 63 6f 75 6e 74 73 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 23 62 65 62 65 62 65 3b 0d 0a 7d 0d 0a 0d 0a 23 69 41 63 63 6f 75 6e 74 73 49 6e 47 61 6d 65 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 23 38 42 43 35 33 46 3b 0d 0a 7d 0d 0a 0d 0a 23 69 41 63 63 6f Data Ascii: #mainBody {max-width:958px;margin:0 auto;padding:0;text-align:left;}#userNumbers {font-weight:bold;padding-top:13px;color:#4d4d4d;}#iTotalAccounts {color:#bebebe;}#iAccountsInGame {color:#8BC53F;}#iAcco

Timestamp	Bytes transferred	Direction	Data
2024-07-11 22:14:16 UTC	563	OUT	GET /public/css/skin_1/header.css HTTP/1.1 Host: steamcommunity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://steamcomunity.aiq.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 22:14:17 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 Cache-Control: public,max-age=806,must-revalidate Expires: Thu, 11 Jul 2024 22:19:44 GMT ETag: "NFoCa4OkAxRb" Date: Thu, 11 Jul 2024 22:14:17 GMT Content-Length: 12764 Connection: close
2024-07-11 22:14:17 UTC	12764	IN	Data Raw: 0d 0a 0d 0a 2e 61 3a 66 6f 63 75 73 20 7b 0d 0a 09 6f 75 74 6c 69 6e 65 3a 20 30 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 68 65 61 64 65 72 42 61 72 20 7b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 0d 0a 09 6d 61 72 67 69 6e 3a 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 31 31 31 31 31 3b 0d 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0d 0a 09 63 6f 6c 6f 72 3a 23 35 34 35 34 35 34 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 0d 0a 7d 0d 0a 0d 0a 61 2e 68 65 61 64 65 72 4c 69 6e 6b 2c 61 2e 68 65 61 64 65 72 4c 69 6e 6b 3a 61 63 74 69 76 65 2c 61 2e 68 65 61 64 65 72 4c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 61 2e Data Ascii: .a:focus {outline: 0 none;}#headerBar {text-align:left;margin:0;padding:0;background-color:#111111;width:100%;color:#545454;font-size:10px;margin-bottom:0;}a.headerLink,a.headerLink:active,a.headerLink:visited,a.

Timestamp	Bytes transferred	Direction	Data
2024-07-11 22:14:16 UTC	548	OUT	GET /public/javascript/global.js HTTP/1.1 Host: steamcommunity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://steamcomunity.aiq.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 22:14:17 UTC	308	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 Cache-Control: public,max-age=656,must-revalidate Expires: Thu, 11 Jul 2024 22:23:26 GMT ETag: "B7Vsdo1okyaC" Date: Thu, 11 Jul 2024 22:14:17 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-07-11 22:14:17 UTC	16076	IN	Data Raw: 30 30 30 30 38 43 44 35 0d 0a 0d 0a 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 52 65 67 69 73 74 65 72 53 74 65 61 6d 4f 6e 57 65 62 50 61 6e 65 6c 53 68 6f 77 6e 48 61 6e 64 6c 65 72 28 20 66 20 29 0d 0a 7b 0d 0a 09 24 4a 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 20 27 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 69 66 20 28 20 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 20 3d 3d 3d 20 22 76 69 73 69 62 6c 65 22 20 29 0d 0a 09 09 09 66 28 29 3b 0d 0a 09 7d 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 52 65 67 69 73 74 65 72 53 74 65 61 6d 4f 6e 57 65 62 50 61 6e 65 6c 48 69 64 64 65 6e 48 61 6e 64 6c 65 72 28 20 66 20 29 0d 0a 7b 0d 0a 09 24 4a 28 64 6f 63 75 6d Data Ascii: 00008CD5function RegisterSteamOnWebPanelShownHandler( f ){$J(document).on( 'visibilitychange', function() {if ( document.visibilityState === "visible" )f();});}function RegisterSteamOnWebPanelHiddenHandler( f ){$J(docum
2024-07-11 22:14:17 UTC	15876	IN	Data Raw: 43 52 43 22 2c 22 65 43 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 34 30 2c 22 73 74 72 53 79 6d 62 6f 6c 22 3a 22 5c 75 32 30 61 31 22 2c 22 62 53 79 6d 62 6f 6c 49 73 50 72 65 66 69 78 22 3a 74 72 75 65 2c 22 62 57 68 6f 6c 65 55 6e 69 74 73 4f 6e 6c 79 22 3a 74 72 75 65 2c 22 73 74 72 44 65 63 69 6d 61 6c 53 79 6d 62 6f 6c 22 3a 22 2c 22 2c 22 73 74 72 54 68 6f 75 73 61 6e 64 73 53 65 70 61 72 61 74 6f 72 22 3a 22 2e 22 2c 22 73 74 72 53 79 6d 62 6f 6c 41 6e 64 4e 75 6d 62 65 72 53 65 70 61 72 61 74 6f 72 22 3a 22 22 7d 2c 22 55 59 55 22 3a 7b 22 73 74 72 43 6f 64 65 22 3a 22 55 59 55 22 2c 22 65 43 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 34 31 2c 22 73 74 72 53 79 6d 62 6f 6c 22 3a 22 24 55 22 2c 22 62 53 79 6d 62 6f 6c 49 73 50 72 65 66 69 78 22 3a 74 72 Data Ascii: CRC","eCurrencyCode":40,"strSymbol":"\u20a1","bSymbolIsPrefix":true,"bWholeUnitsOnly":true,"strDecimalSymbol":",","strThousandsSeparator":".","strSymbolAndNumberSeparator":""},"UYU":{"strCode":"UYU","eCurrencyCode":41,"strSymbol":"$U","bSymbolIsPrefix":tr
2024-07-11 22:14:17 UTC	4113	IN	Data Raw: 6e 28 29 20 3c 20 31 34 30 37 38 30 30 32 34 38 20 29 0d 0a 09 7b 0d 0a 09 09 2f 2f 20 77 6f 72 6b 61 72 6f 75 6e 64 20 66 6f 72 20 63 6c 69 65 6e 74 20 62 72 65 61 6b 20 77 68 65 6e 20 74 68 65 20 70 6f 70 75 70 20 77 69 6e 64 6f 77 20 69 73 20 74 6f 6f 20 74 61 6c 6c 20 66 6f 72 20 74 68 65 20 73 63 72 65 65 6e 2e 20 20 54 72 79 20 61 6e 64 20 70 69 63 6b 20 61 20 68 65 69 67 68 74 20 74 68 61 74 20 77 69 6c 6c 20 66 69 74 20 68 65 72 65 2e 0d 0a 09 09 76 61 72 20 6e 43 6c 69 65 6e 74 43 68 72 6f 6d 65 50 58 20 3d 20 39 32 3b 0d 0a 09 09 69 66 20 28 20 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 61 76 61 69 6c 48 65 69 67 68 74 20 26 26 20 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 2e 61 76 61 69 6c 48 65 69 67 68 74 20 2d 20 6e 43 6c 69 65 6e 74 43 68 72 6f Data Ascii: n() < 1407800248 ){// workaround for client break when the popup window is too tall for the screen. Try and pick a height that will fit here.var nClientChromePX = 92;if ( window.screen.availHeight && window.screen.availHeight - nClientChro
2024-07-11 22:14:17 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 09 09 09 09 09 09 7b 0d 0a 09 09 09 09 09 09 09 61 64 64 2e 70 75 73 68 28 20 63 68 65 63 6b 62 6f 78 2e 76 61 6c 75 65 20 29 3b 0d 0a 09 09 09 09 09 09 7d 0d 0a 09 09 09 09 09 09 65 6c 73 65 0d 0a 09 09 09 09 09 09 7b 0d 0a 09 09 09 09 09 09 09 72 65 6d 6f 76 65 2e 70 75 73 68 28 20 63 68 65 63 6b 62 6f 78 2e 76 61 6c 75 65 20 29 3b 0d 0a 09 09 09 09 09 09 7d 0d 0a 09 09 09 09 09 7d 0d 0a 0d 0a 09 09 09 09 09 69 66 20 28 20 61 64 64 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 20 26 26 20 72 65 6d 6f 76 65 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 20 29 0d 0a 09 09 09 09 09 09 72 65 74 75 72 6e 3b 0d 0a 0d 0a 09 09 09 09 09 24 4a 2e 70 6f 73 74 28 0d 0a 09 09 09 09 09 09 27 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 Data Ascii: 00004000{add.push( checkbox.value );}else{remove.push( checkbox.value );}}if ( add.length == 0 && remove.length == 0 )return;$J.post('https://steamcommunity
2024-07-11 22:14:17 UTC	12	IN	Data Raw: 67 69 64 63 6f 6d 6d 65 6e 74 0d 0a Data Ascii: gidcomment
2024-07-11 22:14:17 UTC	4265	IN	Data Raw: 30 30 30 30 31 30 39 44 0d 0a 68 69 67 68 6c 69 67 68 74 27 20 29 3b 0d 0a 09 09 69 66 20 28 20 67 69 64 43 6f 6d 6d 65 6e 74 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 24 4a 28 20 22 23 63 6f 6d 6d 65 6e 74 5f 22 20 2b 20 67 69 64 43 6f 6d 6d 65 6e 74 20 29 2e 61 64 64 43 6c 61 73 73 28 20 27 68 69 67 68 6c 69 67 68 74 65 64 27 20 29 3b 0d 0a 09 09 09 73 65 74 54 69 6d 65 6f 75 74 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 24 4a 28 20 22 23 63 6f 6d 6d 65 6e 74 5f 22 20 2b 20 67 69 64 43 6f 6d 6d 65 6e 74 20 29 5b 30 5d 2e 73 63 72 6f 6c 6c 49 6e 74 6f 56 69 65 77 28 29 3b 20 7d 2c 35 30 30 20 29 3b 0d 0a 09 09 7d 0d 0a 09 7d 2c 0d 0a 0d 0a 09 42 4d 61 74 63 68 65 73 3a 20 66 75 6e 63 74 69 6f 6e 28 20 73 74 72 54 79 70 65 2c 20 73 74 65 61 6d 69 64 4f 77 6e Data Ascii: 0000109Dhighlight' );if ( gidComment ){$J( "#comment_" + gidComment ).addClass( 'highlighted' );setTimeout( function() { $J( "#comment_" + gidComment )[0].scrollIntoView(); },500 );}},BMatches: function( strType, steamidOwn
2024-07-11 22:14:17 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 69 64 3a 20 61 75 74 68 6f 72 41 63 63 6f 75 6e 74 49 44 2c 0d 0a 09 09 09 73 74 61 72 74 3a 20 74 68 69 73 2e 6d 5f 63 50 61 67 65 53 69 7a 65 20 2a 20 74 68 69 73 2e 6d 5f 69 43 75 72 72 65 6e 74 50 61 67 65 0d 0a 09 09 7d 20 29 3b 0d 0a 0d 0a 09 09 76 61 72 20 74 68 72 65 61 64 20 3d 20 74 68 69 73 3b 0d 0a 0d 0a 09 09 76 61 72 20 64 69 61 6c 6f 67 20 3d 20 53 68 6f 77 43 6f 6e 66 69 72 6d 44 69 61 6c 6f 67 28 20 27 4d 61 72 6b 20 53 75 73 70 69 63 69 6f 75 73 27 2c 20 27 54 68 69 73 20 77 69 6c 6c 20 67 69 76 65 20 61 20 63 6f 6d 6d 75 6e 69 74 79 20 62 61 6e 20 74 6f 20 74 68 65 20 61 75 74 68 6f 72 2c 20 61 64 64 20 74 68 69 73 20 63 6f 6d 6d 65 6e 74 20 61 73 20 74 72 61 69 6e 69 6e 67 20 64 61 74 61 20 73 6f 20 77 65 Data Ascii: 00004000id: authorAccountID,start: this.m_cPageSize * this.m_iCurrentPage} );var thread = this;var dialog = ShowConfirmDialog( 'Mark Suspicious', 'This will give a community ban to the author, add this comment as training data so we
2024-07-11 22:14:17 UTC	12	IN	Data Raw: 61 67 65 50 72 65 66 69 78 20 0d 0a Data Ascii: agePrefix
2024-07-11 22:14:17 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2b 20 27 63 74 6e 27 20 29 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 69 66 20 28 20 74 68 69 73 2e 6d 5f 63 54 6f 74 61 6c 43 6f 75 6e 74 20 3e 20 30 20 29 0d 0a 09 09 09 09 09 24 28 73 74 72 50 61 67 65 50 72 65 66 69 78 20 2b 20 27 63 74 6e 27 20 29 2e 73 68 6f 77 28 29 3b 0d 0a 09 09 09 09 65 6c 73 65 0d 0a 09 09 09 09 09 24 28 73 74 72 50 61 67 65 50 72 65 66 69 78 20 2b 20 27 63 74 6e 27 20 29 2e 68 69 64 65 28 29 3b 0d 0a 09 09 09 7d 0d 0a 0d 0a 0d 0a 09 09 09 69 66 20 28 20 74 68 69 73 2e 6d 5f 63 4d 61 78 50 61 67 65 73 20 3c 3d 20 31 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 24 28 73 74 72 50 61 67 65 50 72 65 66 69 78 20 2b 20 27 63 6f 6e 74 72 6f 6c 73 27 29 2e 68 69 64 65 28 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 09 Data Ascii: 00004000+ 'ctn' ) ){if ( this.m_cTotalCount > 0 )$(strPagePrefix + 'ctn' ).show();else$(strPagePrefix + 'ctn' ).hide();}if ( this.m_cMaxPages <= 1 ){$(strPagePrefix + 'controls').hide();}
2024-07-11 22:14:17 UTC	12	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 20 24 0d 0a Data Ascii: unction( $

Timestamp	Bytes transferred	Direction	Data
2024-07-11 22:14:16 UTC	546	OUT	GET /public/javascript/home.js HTTP/1.1 Host: steamcommunity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://steamcomunity.aiq.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-11 22:14:17 UTC	157	IN	HTTP/1.1 404 Not Found Server: nginx Content-Type: text/html; charset=UTF-8 Date: Thu, 11 Jul 2024 22:14:17 GMT Content-Length: 16 Connection: close
2024-07-11 22:14:17 UTC	16	IN	Data Raw: 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a Data Ascii: File not found.