| xinchacha2dv.ocsp-certum.com/ |  23.36.79.10 | | 1.5 kB |
URL xinchacha2dv.ocsp-certum.com/ IP23.36.79.10:0 ASN#20940 Akamai International B.V.
Hashf8c9bbb514b48da962b0f6d8dafb573a 171dfd764f72fa4f6e370fb17a25c9159fb563af efc91e57e7ef2b74d3be958ba0ce114fd041141adab3813e0af8619a0ad1750d
POST / HTTP/1.1
Host: xinchacha2dv.ocsp-certum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1538
X-Cached: MISS
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=856
Date: Wed, 08 May 2024 13:31:21 GMT
Connection: keep-alive
X-N: S
|
|
| steamproxy.net/id/shadesofshit/gamecards/245070/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit |  47.76.207.74 | 302 Found | 0 B |
URL User Request GET HTTP/2steamproxy.net/id/shadesofshit/gamecards/245070/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /id/shadesofshit/gamecards/245070/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit/id/shadesofshit HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 08 May 2024 13:31:21 GMT
content-type: text/html;charset=UTF-8
content-length: 0
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-allow-method: *
access-control-allow-methods: POST, GET, HEAD, OPTIONS
access-control-allow-origin: https://steamproxy.net
access-control-expose-headers: X-eresult,X-error_message
cache-control: no-cache
content-encoding: gzip
expires: Mon, 26 Jul 1997 05:00:00 GMT
location: /id/shadesofshit
origin: https://steamproxy.net
set-cookie: sessionid=747399a5b6a707d554b7e44f; Path=/; Secure; SameSite=None;Domain=steamproxy.net
steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; Path=/; Secure; HttpOnly; SameSite=None;Domain=steamproxy.net
uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; Path=/; Domain=steamproxy.net
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-proxy-hostname: steam-session-cluster-5565ddcfbf-gql6g
traceid: eaac1cf43517151750813454258d0001
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/id/shadesofshit | 47.76.207.74 | 200 OK | 6.3 kB |
URL User Request GET HTTP/2steamproxy.net/id/shadesofshit IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (3002), with CRLF, LF line terminators Hash9a60fbbbd98da2c3c0eff99b2bfa08a9 f00f861c74a0484cd26ff82dc35a4c2fca0df37e a815db16c9595fb20a08f2c7d373e8ff1f7326833cf630b40e35b5a8952f7966
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /id/shadesofshit HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:22 GMT
content-type: text/html;charset=UTF-8
content-length: 6324
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-allow-method: *
access-control-allow-methods: POST, GET, HEAD, OPTIONS
access-control-allow-origin: https://steamproxy.net
access-control-expose-headers: X-eresult,X-error_message
cache-control: no-cache
content-encoding: gzip
expires: Mon, 26 Jul 1997 05:00:00 GMT
origin: https://steamproxy.net
set-cookie: uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; Path=/; Domain=steamproxy.net
vary: Accept-Encoding
x-proxy-hostname: steam-session-cluster-5565ddcfbf-gql6g
traceid: eaac1cf43317151750823024346d0001
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png | 23.36.76.241 | 200 OK | 3.8 kB |
URL GET HTTP/1.1community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png IP23.36.76.241:443 ASN#20940 Akamai International B.V.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerLet's Encrypt Subjectcdn.akamai.steamstatic.com FingerprintE0:5D:52:B1:76:EB:D8:4A:30:6F:25:76:22:B1:31:81:41:54:C4:74 ValidityThu, 04 Apr 2024 17:02:56 GMT - Wed, 03 Jul 2024 17:02:55 GMT
File typePNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced Hasheabc76eb57feae44add7faead028521e 4e3e53938fad15661d2d046a868338841a95db19 fc9e6260a2706ae146282d77e67bc1b74688435f8912ab4c1932641eec28bffa
GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1
Host: community.akamai.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 3777
Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT
ETag: "5a4ed654-ec1"
Accept-Ranges: bytes
Date: Wed, 08 May 2024 13:31:23 GMT
Connection: keep-alive
|
|
| community.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png | 23.36.76.241 | 200 OK | 1.8 kB |
URL GET HTTP/1.1community.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png IP23.36.76.241:443 ASN#20940 Akamai International B.V.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerLet's Encrypt Subjectcdn.akamai.steamstatic.com FingerprintE0:5D:52:B1:76:EB:D8:4A:30:6F:25:76:22:B1:31:81:41:54:C4:74 ValidityThu, 04 Apr 2024 17:02:56 GMT - Wed, 03 Jul 2024 17:02:55 GMT
File typePNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced Hash574c350c7b23ae794d5276f8580e0838 235c7b35c3468f8915eca01f7abdb43d34079609 8b97ba0dac22fe6704c1f6d95fe79613f33017804f256abb9006df0442491787
GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1
Host: community.akamai.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 1846
Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT
ETag: "5a4ed654-736"
Accept-Ranges: bytes
Date: Wed, 08 May 2024 13:31:23 GMT
Connection: keep-alive
|
|
| community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png | 23.36.76.241 | 200 OK | 11 kB |
URL GET HTTP/1.1community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png IP23.36.76.241:443 ASN#20940 Akamai International B.V.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerLet's Encrypt Subjectcdn.akamai.steamstatic.com FingerprintE0:5D:52:B1:76:EB:D8:4A:30:6F:25:76:22:B1:31:81:41:54:C4:74 ValidityThu, 04 Apr 2024 17:02:56 GMT - Wed, 03 Jul 2024 17:02:55 GMT
File typePNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced Hasha4e79c73ee13cb25b60fc4b0ba1f690c b690c31b2eb1b0eb085e91aaae7e79f03debe7c1 6cb869df089146c12efb5e9c968e911c314842624ba6f052a11346ac734cadc8
GET /public/shared/images/responsive/header_logo.png HTTP/1.1
Host: community.akamai.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 10863
Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT
ETag: "5a4ed654-2a6f"
Accept-Ranges: bytes
Date: Wed, 08 May 2024 13:31:23 GMT
Connection: keep-alive
|
|
| community.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016 | 23.36.76.241 | 200 OK | 1.7 kB |
URL GET HTTP/1.1community.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016 IP23.36.76.241:443 ASN#20940 Akamai International B.V.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerLet's Encrypt Subjectcdn.akamai.steamstatic.com FingerprintE0:5D:52:B1:76:EB:D8:4A:30:6F:25:76:22:B1:31:81:41:54:C4:74 ValidityThu, 04 Apr 2024 17:02:56 GMT - Wed, 03 Jul 2024 17:02:55 GMT
File typeSVG Scalable Vector Graphics image Hashb7a7e43284e2ffe806ac1bc27c1f6a87 e8196489e2ae99ec6eb33995b5a3e108d6e44de0 c3a7c646a1305017f22423030cb5a12acc9f96b64013dcef7aeb80567b542cbb
GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1
Host: community.akamai.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/svg+xml
Last-Modified: Tue, 17 Nov 2020 23:34:54 GMT
ETag: "5fb45e1e-e64"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1736
Date: Wed, 08 May 2024 13:31:23 GMT
Connection: keep-alive
|
|
| community.akamai.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1 | 23.36.76.241 | 200 OK | 3.7 kB |
URL GET HTTP/1.1community.akamai.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1 IP23.36.76.241:443 ASN#20940 Akamai International B.V.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerLet's Encrypt Subjectcdn.akamai.steamstatic.com FingerprintE0:5D:52:B1:76:EB:D8:4A:30:6F:25:76:22:B1:31:81:41:54:C4:74 ValidityThu, 04 Apr 2024 17:02:56 GMT - Wed, 03 Jul 2024 17:02:55 GMT
File typePNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced Hash1626f52addb7c56fe3679d82108c62e9 2b414092d66ecff528950093a655f755c3c7f3b5 ae9f6c61e25d15882bf57bde193d10d375bd315c9741cabda11d700fd1bb7dd1
GET /public/images/skin_1/footerLogo_valve.png?v=1 HTTP/1.1
Host: community.akamai.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 3737
Last-Modified: Fri, 05 Jan 2018 01:34:51 GMT
ETag: "5a4ed63b-e99"
Accept-Ranges: bytes
Date: Wed, 08 May 2024 13:31:23 GMT
Connection: keep-alive
|
|
| community.akamai.steamstatic.com/public/images/skin_1/arrowDn9x5.gif | 23.36.76.241 | 200 OK | 1.1 kB |
URL GET HTTP/1.1community.akamai.steamstatic.com/public/images/skin_1/arrowDn9x5.gif IP23.36.76.241:443 ASN#20940 Akamai International B.V.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerLet's Encrypt Subjectcdn.akamai.steamstatic.com FingerprintE0:5D:52:B1:76:EB:D8:4A:30:6F:25:76:22:B1:31:81:41:54:C4:74 ValidityThu, 04 Apr 2024 17:02:56 GMT - Wed, 03 Jul 2024 17:02:55 GMT
File typeGIF image data, version 89a, 9 x 5 Hashef8ee66b9461c0317eaab1827eac53bc 24cf37bea83d4357c8481218f4c2c2acd74bc73c f2cc9ee07ca40866b840f1a4d780c4ab75d91bfdbe215c0f7251c0d76cfbad7c
GET /public/images/skin_1/arrowDn9x5.gif HTTP/1.1
Host: community.akamai.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/gif
Content-Length: 1101
Last-Modified: Fri, 05 Jan 2018 01:34:50 GMT
ETag: "5a4ed63a-44d"
Accept-Ranges: bytes
Date: Wed, 08 May 2024 13:31:23 GMT
Connection: keep-alive
|
|
| avatars.akamai.steamstatic.com/72b6049f748d31315b29148798a4756c2469adf0_full.jpg | 23.36.76.224 | 200 OK | 17 kB |
URL GET HTTP/2avatars.akamai.steamstatic.com/72b6049f748d31315b29148798a4756c2469adf0_full.jpg IP23.36.76.224:443 ASN#20940 Akamai International B.V.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerLet's Encrypt Subjectavatars.akamai.steamstatic.com FingerprintD2:92:98:4E:D0:22:CC:A1:84:C0:36:77:DA:2A:0D:31:FA:44:3A:DB ValidityThu, 28 Mar 2024 08:10:26 GMT - Wed, 26 Jun 2024 08:10:25 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3 Hashd7febdaa1d743484deefd8055dc3fbf6 f5841fd6d8d7d117a0e64a4df1f622ae4554c9a3 e0c3dfe623301a1765c8cae23fe2f26347e80e2533b32e122854a9176e4ee2e8
GET /72b6049f748d31315b29148798a4756c2469adf0_full.jpg HTTP/1.1
Host: avatars.akamai.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: image/jpeg
content-length: 17087
content-md5: 1/69qh10NITe79gFXcP79g==
last-modified: Tue, 15 Mar 2022 15:33:13 GMT
etag: "0x8DA06991E6A6BA7"
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=315360000
expires: Sat, 06 May 2034 13:31:23 GMT
date: Wed, 08 May 2024 13:31:23 GMT
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english | 47.76.207.74 | 200 OK | 3.9 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash75f321bb2f8bae9ca8e5c4c6d72521bd 8ed540dc9da8c5d7c2bbe390fc663e6de0b1ef0c 92a217685eda5e8319d193142aeadf80ae7a9c9e04a9a365d9cf01078d459985
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/javascript;charset=UTF-8
content-length: 3869
last-modified: Sun, 09 Sep 2001 01:46:40 GMT
etag: "dfMhuy-Lrpyo"
vary: Accept-Encoding
cache-control: public, max-age=12113366
expires: Wed, 25 Sep 2024 18:20:49 GMT
content-disposition: inline;filename=f.txt
traceid: caf948cb-11b2-4902-a623-597352e2a4ac
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/reportedcontent.js?v=dAtjbcZMWhSe&l=english | 47.76.207.74 | 200 OK | 14 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/reportedcontent.js?v=dAtjbcZMWhSe&l=english IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash4ddc4fff9455a386eb9410acb7854c69 ef0986aa241b994047f178fa14ab0da8c24c4732 3f787b9459e412cc1e4df34368ef0581bf8b8e88140a96fa3fc210b64469237a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/reportedcontent.js?v=dAtjbcZMWhSe&l=english HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/javascript;charset=UTF-8
content-length: 13663
last-modified: Sun, 09 Sep 2001 01:46:40 GMT
etag: "dAtjbcZMWhSe"
vary: Accept-Encoding
cache-control: public, max-age=11961429
expires: Tue, 24 Sep 2024 00:08:32 GMT
content-disposition: inline;filename=f.txt
traceid: 5dec580d-2026-431c-9da6-5c79ded4e227
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/modalContent.js?v=L35TrLJDfqtD&l=english | 47.76.207.74 | 200 OK | 14 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/modalContent.js?v=L35TrLJDfqtD&l=english IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeASCII text, with very long lines (999), with CRLF line terminators Hash2f7e53acb2437eab435a442fcd7cad63 66c65e099a6e7a0325d277c937994af4d24b97b3 112ede4f5c51b715eebe43ae584708dd0222bebd913726caf0f261c0d2f5f4a9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/modalContent.js?v=L35TrLJDfqtD&l=english HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/javascript;charset=UTF-8
content-length: 13910
last-modified: Sun, 09 Sep 2001 01:46:40 GMT
etag: "L35TrLJDfqtD"
vary: Accept-Encoding
cache-control: public, max-age=8775121
expires: Sun, 18 Aug 2024 03:03:24 GMT
content-disposition: inline;filename=f.txt
traceid: e0ae025a-2d74-417f-b386-8a8bdde73e74
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english | 47.76.207.74 | 200 OK | 25 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with CRLF line terminators Hasha52bc800ab6e9df5a05a5153eea29ffb 8661643fcbc7498dd7317d100ec62d1c1c6886ff 57cfaf9b92c98541f769090cd0229a30013cea7cfafc18519ca654bfae29e14e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/javascript;charset=UTF-8
content-length: 24657
last-modified: Sun, 09 Sep 2001 01:46:40 GMT
etag: "pSvIAKtunfWg"
vary: Accept-Encoding
cache-control: public, max-age=12523988
expires: Mon, 30 Sep 2024 12:24:31 GMT
content-disposition: inline;filename=f.txt
traceid: 74d81f04-6db1-4d6c-ac7c-ed320843258b
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 | 47.76.207.74 | 200 OK | 16 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash72938851e7c2ef7b63299eba0c6752cb b75196bd3a6f9f4dfc1bbf5e43e96874bcd9ce4e e2d4e0e1d3e162fdc815f16dfff9ae9b0a967949f0f3ae371f947d730a3f0661
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/javascript;charset=UTF-8
content-length: 16087
last-modified: Tue, 22 Mar 2022 23:23:42 GMT
etag: ".zYHOpI1L3Rt0"
vary: Accept-Encoding
cache-control: public, max-age=4818627
expires: Wed, 03 Jul 2024 08:01:50 GMT
content-disposition: inline;filename=f.txt
traceid: 12fa5afe-e07e-45c3-a08a-7c0a5654c671
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/profile.js?v=Iy1ies1ROjUT&l=english | 47.76.207.74 | 200 OK | 27 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/profile.js?v=Iy1ies1ROjUT&l=english IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeHTML document, ASCII text, with very long lines (483), with CRLF line terminators Hasha097bd2d3d0efe6bb3a964c1075b4788 8bc43b98e6d6c06f19a219cdc416bf60d31ad7bd 0cb45c52ba1a5ea8759fb4f947eb8f90f45377c209ba8e843fc7d1ab2d6e6358
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/profile.js?v=Iy1ies1ROjUT&l=english HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/javascript;charset=UTF-8
content-length: 27141
last-modified: Sun, 09 Sep 2001 01:46:40 GMT
etag: "Iy1ies1ROjUT"
vary: Accept-Encoding
cache-control: public, max-age=2749447
expires: Sun, 09 Jun 2024 09:15:30 GMT
content-disposition: inline;filename=f.txt
traceid: c3e30644-efbe-455e-aae9-92bf4124b5f6
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/manifest.js?v=rG2lbPb1NkW4&l=english | 47.76.207.74 | 200 OK | 16 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/manifest.js?v=rG2lbPb1NkW4&l=english IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (15632), with CRLF, LF line terminators Hash155c5ef6dedc3e4bd82099f9ab9f94cb 77afdd4c3549da53d8bbaa60febbdca780270601 d5d529d112c1cd2aef67f9d9670623d4c223deac8285fa4e1863e98ec054bda4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/manifest.js?v=rG2lbPb1NkW4&l=english HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/javascript;charset=UTF-8
content-length: 15800
last-modified: Sun, 09 Sep 2001 01:46:40 GMT
etag: "rG2lbPb1NkW4"
vary: Accept-Encoding
cache-control: public, max-age=15499464
expires: Sun, 03 Nov 2024 22:55:47 GMT
content-disposition: inline;filename=f.txt
traceid: 977a2a09-f025-45a0-8cb8-a3d66ad58d90
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/global.js?v=B7Vsdo1okyaC&l=english | 47.76.207.74 | 200 OK | 104 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/global.js?v=B7Vsdo1okyaC&l=english IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeASCII text, with very long lines (9521), with CRLF line terminators Size104 kB (103580 bytes) Hashe52ba393940741c4b1822cb63ffe4296 fe416c1be78d6ab3ab0a7de94553d718bb0d44af b4e154beb49ab171d5f62e93e3de8f271fbdd021a2a01d88eb02fdb0981350ab
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/global.js?v=B7Vsdo1okyaC&l=english HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/javascript;charset=UTF-8
content-length: 103580
last-modified: Sun, 09 Sep 2001 01:46:40 GMT
etag: "B7Vsdo1okyaC"
vary: Accept-Encoding
cache-control: public, max-age=11870447
expires: Sun, 22 Sep 2024 22:52:10 GMT
content-disposition: inline;filename=f.txt
traceid: 64e2317c-cdf0-442f-bc25-bfa857c60270
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&load=effects,controls,slider,dragdrop | 47.76.207.74 | 200 OK | 122 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&load=effects,controls,slider,dragdrop IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeHTML document, ASCII text, with CRLF line terminators Size122 kB (122171 bytes) Hash39e34882ba4417cb4b1b84916dabb770 0d0ca081fb60c8aad337091bafcbe84f966c38b0 da708635da162ea493874627775c3520a42145b79c73bf787b5113bf87c0b27c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&load=effects,controls,slider,dragdrop HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/javascript;charset=UTF-8
content-length: 122171
last-modified: Sun, 09 Sep 2001 01:46:40 GMT
etag: "OeNIgrpEF8tL"
vary: Accept-Encoding
cache-control: public, max-age=10178403
expires: Tue, 03 Sep 2024 08:51:26 GMT
content-disposition: inline;filename=f.txt
traceid: cd57f270-5d7f-4f5c-89ac-8c441f2f9b2e
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=english | 47.76.207.74 | 200 OK | 154 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=english IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (2618), with CRLF line terminators Size154 kB (154405 bytes) Hash841573f4356a67110c64dd17f1cdaba0 d3b0950049753b583ccb7eca7ad5bd9bd32bad62 3803f8b64e775d365bed687f2de99a005d3b5b1a97a0922f3421ee01b5341f0b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=english HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/javascript;charset=UTF-8
content-length: 154405
last-modified: Sun, 09 Sep 2001 01:46:40 GMT
etag: "REEGJU1hwkYl"
vary: Accept-Encoding
cache-control: public, max-age=14893191
expires: Sun, 27 Oct 2024 22:31:14 GMT
content-disposition: inline;filename=f.txt
traceid: 300003a1-bc5a-477d-ac50-a1e16496b7fe
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC | 47.76.207.74 | 200 OK | 96 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (32086), with CRLF line terminators Hash4dc834d16a0d219d5c2b8a5b814569e4 4fbe0563917d6f6289e4e1b4a0a8758e4e43bda9 91222f96f34735ebc88df208017e54d4329b9202e3e52367fb8b149698a1a5ef
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/javascript;charset=UTF-8
content-length: 95790
last-modified: Fri, 05 Jan 2018 01:34:51 GMT
etag: ".isFTSRckeNhC"
vary: Accept-Encoding
cache-control: public, max-age=2991217
expires: Wed, 12 Jun 2024 04:25:00 GMT
content-disposition: inline;filename=f.txt
traceid: 852ddca1-9040-4a31-b743-bfbcc7b022e5
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw | 47.76.207.74 | 200 OK | 169 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Size169 kB (169399 bytes) Hash6a39e0b509fecb928d47b8a2643fed2a f67fa6cb1d09963d10ba117d6553c8e7d5bc7863 d8bdea7fff893dbdbeaf6c2affec091a77483b9ec10e7958486bc3b6cc170c96
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/javascript;charset=UTF-8
content-length: 169399
last-modified: Fri, 05 Jan 2018 01:34:51 GMT
etag: ".55t44gwuwgvw"
vary: Accept-Encoding
cache-control: public, max-age=8331574
expires: Mon, 12 Aug 2024 23:50:57 GMT
content-disposition: inline;filename=f.txt
traceid: a15560b7-2479-430a-bbde-e0441a6679a2
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| community.akamai.steamstatic.com/public/images/profile/2020/bg_dots.png | 23.36.76.241 | 200 OK | 1.2 MB |
URL GET HTTP/1.1community.akamai.steamstatic.com/public/images/profile/2020/bg_dots.png IP23.36.76.241:443 ASN#20940 Akamai International B.V.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerLet's Encrypt Subjectcdn.akamai.steamstatic.com FingerprintE0:5D:52:B1:76:EB:D8:4A:30:6F:25:76:22:B1:31:81:41:54:C4:74 ValidityThu, 04 Apr 2024 17:02:56 GMT - Wed, 03 Jul 2024 17:02:55 GMT
File typePNG image data, 1769 x 905, 8-bit/color RGB, non-interlaced Size1.2 MB (1191493 bytes) Hash131d06731c3d240f5985b12e67d6f374 297eedc5a98687ac1413c397a68ef2acb80d1137 7ee0714a0ffa443dfaf8a6f680d8218d02d89a5855f90b04ae20647387810319
GET /public/images/profile/2020/bg_dots.png HTTP/1.1
Host: community.akamai.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 1191493
Last-Modified: Tue, 16 Jun 2020 22:53:14 GMT
ETag: "5ee94d5a-122e45"
Accept-Ranges: bytes
Date: Wed, 08 May 2024 13:31:25 GMT
Connection: keep-alive
|
|
| community.akamai.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1 | 23.36.76.241 | 200 OK | 291 B |
URL GET HTTP/1.1community.akamai.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1 IP23.36.76.241:443 ASN#20940 Akamai International B.V.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerLet's Encrypt Subjectcdn.akamai.steamstatic.com FingerprintE0:5D:52:B1:76:EB:D8:4A:30:6F:25:76:22:B1:31:81:41:54:C4:74 ValidityThu, 04 Apr 2024 17:02:56 GMT - Wed, 03 Jul 2024 17:02:55 GMT
File typePNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced Hasha2796187c58c7e948159e37d6990ecc2 4209cd85add507247f9ce5a87a8c9095b54ee417 23341256db7f44b1f3811880fa2bae6b7748bbf6b62c544a162e38cf0d5c5082
GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1
Host: community.akamai.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 291
Last-Modified: Wed, 21 Mar 2018 00:07:17 GMT
ETag: "5ab1a235-123"
Accept-Ranges: bytes
Date: Wed, 08 May 2024 13:31:25 GMT
Connection: keep-alive
|
|
| community.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 | 23.36.76.241 | 200 OK | 123 kB |
URL GET HTTP/1.1community.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 IP23.36.76.241:443 ASN#20940 Akamai International B.V.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerLet's Encrypt Subjectcdn.akamai.steamstatic.com FingerprintE0:5D:52:B1:76:EB:D8:4A:30:6F:25:76:22:B1:31:81:41:54:C4:74 ValidityThu, 04 Apr 2024 17:02:56 GMT - Wed, 03 Jul 2024 17:02:55 GMT
File typeTrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;MotivaSan Size123 kB (122684 bytes) Hash57613e143ff3dae10f282e84a066de28 88756cc8c6db645b5f20aa17b14feefb4411c25f 19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14
GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1
Host: community.akamai.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://steamproxy.net
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/octet-stream
Content-Length: 122684
Last-Modified: Tue, 28 Jul 2020 23:16:28 GMT
ETag: "5f20b1cc-1df3c"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Date: Wed, 08 May 2024 13:31:25 GMT
Connection: keep-alive
|
|
| community.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 | 23.36.76.241 | 200 OK | 124 kB |
URL GET HTTP/1.1community.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 IP23.36.76.241:443 ASN#20940 Akamai International B.V.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerLet's Encrypt Subjectcdn.akamai.steamstatic.com FingerprintE0:5D:52:B1:76:EB:D8:4A:30:6F:25:76:22:B1:31:81:41:54:C4:74 ValidityThu, 04 Apr 2024 17:02:56 GMT - Wed, 03 Jul 2024 17:02:55 GMT
File typeTrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaSans Size124 kB (124048 bytes) Hash2d64caa5ecbf5e42cbb766ca4d85e90e 147420abceb4a7fd7e486dddcfe68cda7ebb3a18 045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f
GET /public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 HTTP/1.1
Host: community.akamai.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://steamproxy.net
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/octet-stream
Content-Length: 124048
Last-Modified: Tue, 28 Jul 2020 23:16:28 GMT
ETag: "5f20b1cc-1e490"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Date: Wed, 08 May 2024 13:31:25 GMT
Connection: keep-alive
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~b28b7af69.js?v=rhZy7gXicAGN&l=english | 47.76.207.74 | 200 OK | 927 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~b28b7af69.js?v=rhZy7gXicAGN&l=english IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (65368), with CRLF, LF line terminators Size927 kB (926783 bytes) Hash85e5a7eeb89e4d883184ff2dce6c0670 6a7a1e5bf6f532d736f7983bff627e63226bd078 8a3f750f8baa1fc0d5ba868c9c4b8ba96fa242e55ecd41a205c22a22b0e6d61c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~b28b7af69.js?v=rhZy7gXicAGN&l=english HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/javascript;charset=UTF-8
content-length: 926783
last-modified: Sun, 09 Sep 2001 01:46:40 GMT
etag: "rhZy7gXicAGN"
vary: Accept-Encoding
cache-control: public, max-age=15499552
expires: Sun, 03 Nov 2024 22:57:15 GMT
content-disposition: inline;filename=f.txt
traceid: 8851bda3-12ce-4155-8b17-6283aff0fd6e
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/main.js?v=ZQOnBoEsdgvM&l=english | 47.76.207.74 | 200 OK | 581 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/main.js?v=ZQOnBoEsdgvM&l=english IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (65368), with CRLF, LF line terminators Size581 kB (581439 bytes) Hash6ba6f68bd429a1b5019ec5acac933708 b87483d3bc6e96e22aa394ea4c41b9e5df195254 6738332e75325d98df5094a7525a1af42feca59c436c1398e50168de78b002df
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/main.js?v=ZQOnBoEsdgvM&l=english HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/javascript;charset=UTF-8
content-length: 581439
last-modified: Sun, 09 Sep 2001 01:46:40 GMT
etag: "ZQOnBoEsdgvM"
vary: Accept-Encoding
cache-control: public, max-age=15499619
expires: Sun, 03 Nov 2024 22:58:22 GMT
content-disposition: inline;filename=f.txt
traceid: 8b588073-2e1c-41fb-8325-87b0b0115a75
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| community.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Thin.ttf?v=4.015 | 23.36.76.241 | 200 OK | 119 kB |
URL GET HTTP/1.1community.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Thin.ttf?v=4.015 IP23.36.76.241:443 ASN#20940 Akamai International B.V.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerLet's Encrypt Subjectcdn.akamai.steamstatic.com FingerprintE0:5D:52:B1:76:EB:D8:4A:30:6F:25:76:22:B1:31:81:41:54:C4:74 ValidityThu, 04 Apr 2024 17:02:56 GMT - Wed, 03 Jul 2024 17:02:55 GMT
File typeTrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansThin4.015;Plau;MotivaSans-T Size119 kB (118736 bytes) Hashce6bda6643b662a41b9fb570bdf72f83 87bcf1d2820b476aaeaea91dc7f6dbedd73c1cb8 0adf4d5edbc82d28879fdfaaf7274ba05162ff8cbbda816d69ed52f1dae547f6
GET /public/shared/fonts/MotivaSans-Thin.ttf?v=4.015 HTTP/1.1
Host: community.akamai.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://steamproxy.net
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/octet-stream
Content-Length: 118736
Last-Modified: Tue, 28 Jul 2020 23:16:27 GMT
ETag: "5f20b1cb-1cfd0"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Date: Wed, 08 May 2024 13:31:26 GMT
Connection: keep-alive
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/localization/sales_english-json.js?contenthash=78c2664709aeddc975e5 | 47.76.207.74 | 200 OK | 172 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/localization/sales_english-json.js?contenthash=78c2664709aeddc975e5 IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (64901), with CRLF, LF line terminators Size172 kB (171845 bytes) Hashe4d059670e0e4236eaf56c81e77cf0c3 94981f1df683d1ce5cd0baa642506fedd2eb7ecc 54f2626efd222a0f910c3049cbb06916637190e2201615286adef63d720f5e5a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/localization/sales_english-json.js?contenthash=78c2664709aeddc975e5 HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:26 GMT
content-type: text/javascript;charset=UTF-8
content-length: 171845
last-modified: Wed, 17 Apr 2024 23:43:35 GMT
etag: "U2Px6UXjBWDe"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=114553
expires: Thu, 09 May 2024 21:20:39 GMT
content-disposition: inline;filename=f.txt
traceid: 34a3cd75-e0da-4ffc-9999-b7af4f64623e
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/shared/css/shared_global.css?v=SPpMitTYp6ku&l=english | 47.76.207.74 | 200 OK | 57 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/shared/css/shared_global.css?v=SPpMitTYp6ku&l=english IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typegzip compressed data, from Unix Hash9074a833a43308157bbdee43a82bba65 8f614276a0e27af4834425b202677822462f6f8d 1c358c5dfee2d06afd0a9255de31fd12bfdb4cb358e86456922e0956036688df
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/shared/css/shared_global.css?v=SPpMitTYp6ku&l=english HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/css;charset=UTF-8
last-modified: Sun, 09 Sep 2001 01:46:40 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=13079161
expires: Sun, 06 Oct 2024 22:37:24 GMT
content-disposition: inline;filename=f.txt
traceid: eaac1cf43917151750832854377d0001
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english | 47.76.207.74 | 200 OK | 254 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typegzip compressed data, from Unix Size254 kB (254106 bytes) Hashe0f664a04306ee3063c111eab978cfaf d57669f1d2dddaaecc91b1fe2bfc9dbec51e9dfe d1fe50cd90e53e4f30156f753f24c2d6ad63d183853a9658aa2bfa442a3fa3de
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/css;charset=UTF-8
last-modified: Sun, 09 Sep 2001 01:46:40 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=14307974
expires: Mon, 21 Oct 2024 03:57:37 GMT
content-disposition: inline;filename=f.txt
traceid: eaac1cf43317151750832914350d0001
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~f036ce556.js?contenthash=4aeaa7f3e9a9fc232310 | 47.76.207.74 | 200 OK | 90 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~f036ce556.js?contenthash=4aeaa7f3e9a9fc232310 IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (65368), with CRLF, LF line terminators Hash736954dd6eb35109c7545382eb229e83 66ac927b362b0ee1f30e212b862b2290c3b895d5 8aca56dc270adcd271fbb6c4b5a0d60e69a4ff2314a179e11af4cdd64bb58e2d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~f036ce556.js?contenthash=4aeaa7f3e9a9fc232310 HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:26 GMT
content-type: text/javascript;charset=UTF-8
content-length: 90126
last-modified: Wed, 17 Apr 2024 23:43:34 GMT
etag: "zMcnvrKcq8yZ"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=114692
expires: Thu, 09 May 2024 21:22:58 GMT
content-disposition: inline;filename=f.txt
traceid: 16846bcc-ad95-4a30-8bed-64de7084a58b
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~c1dfbefd5.js?contenthash=d3fb7b7d10d08f0d7ff8 | 47.76.207.74 | 200 OK | 82 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~c1dfbefd5.js?contenthash=d3fb7b7d10d08f0d7ff8 IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (65368), with CRLF, LF line terminators Hash65491fbfcd6929e819d677675a736bb0 2c72425e1c1f8ebff4287d4d0c46914557fd4f43 4c5db7c59a35883dd1963c01572cc23ace26cf3b97f54ae0e4f369eb4c0c1d26
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~c1dfbefd5.js?contenthash=d3fb7b7d10d08f0d7ff8 HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:26 GMT
content-type: text/javascript;charset=UTF-8
content-length: 81762
last-modified: Tue, 07 May 2024 22:56:51 GMT
etag: "_oQgjDTg7fRQ"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=206823
expires: Fri, 10 May 2024 22:58:29 GMT
content-disposition: inline;filename=f.txt
traceid: a1e675f1-520f-4fe9-98ad-8b3db141824f
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~c18a43282.js?contenthash=1797f4a7ab8c2f27a11c | 47.76.207.74 | 200 OK | 78 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~c18a43282.js?contenthash=1797f4a7ab8c2f27a11c IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (64576), with CRLF, LF line terminators Hash201486e5ad4684a9d0cd30a12eca89f4 e582b94e6c4e7f48d7ce597498450f42a89c6d4e 2d01544d363d9d59df22a3bd6e05afd3ea1fc20eb38cd18facf38b089d5860e1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~c18a43282.js?contenthash=1797f4a7ab8c2f27a11c HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:26 GMT
content-type: text/javascript;charset=UTF-8
content-length: 77745
last-modified: Wed, 17 Apr 2024 23:43:35 GMT
etag: "O-FSMGG3Gyx_"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=114666
expires: Thu, 09 May 2024 21:22:32 GMT
content-disposition: inline;filename=f.txt
traceid: e176709e-416e-4f7b-9932-8bfd36d637c1
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~906a41d8e.js?contenthash=bc65a674fca36dfbad5e | 47.76.207.74 | 200 OK | 18 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~906a41d8e.js?contenthash=bc65a674fca36dfbad5e IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (17427), with CRLF, LF line terminators Hash54ed12ff0f99061f5940ce34351a9fab 4c32852988c5ee4c80f6d3026062efa7e6f55110 d1cf540345b953d76dc786daea78f260fc9630314215498f84f24be028229fb9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~906a41d8e.js?contenthash=bc65a674fca36dfbad5e HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:26 GMT
content-type: text/javascript;charset=UTF-8
content-length: 17595
last-modified: Wed, 17 Apr 2024 23:43:35 GMT
etag: "EMncs5O5KwPb"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=114825
expires: Thu, 09 May 2024 21:25:11 GMT
content-disposition: inline;filename=f.txt
traceid: 7f8efd8f-8e46-4145-9211-1af75ed5f19c
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~c7a3fa389.js?contenthash=28f31dbe47f6b6412c17 | 47.76.207.74 | 200 OK | 60 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~c7a3fa389.js?contenthash=28f31dbe47f6b6412c17 IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (59433), with CRLF, LF line terminators Hasha26c90435ca13d3be4f3f3bbcde7bdb5 64865e36b5ddb8010f6252be24217fe38d1bcba2 05ff013e1e8d0ad36d817fb396e3056b68c5498ee785686db82e1b5d707fa5c7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~c7a3fa389.js?contenthash=28f31dbe47f6b6412c17 HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:26 GMT
content-type: text/javascript;charset=UTF-8
content-length: 59601
last-modified: Wed, 17 Apr 2024 23:43:35 GMT
etag: "xLq12u4Rks29"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=114659
expires: Thu, 09 May 2024 21:22:25 GMT
content-disposition: inline;filename=f.txt
traceid: 33cee69b-9fdf-4c19-b624-d052fe3ccff1
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~642602239.js?contenthash=5dd5b4d316afbe01d44f | 47.76.207.74 | 200 OK | 76 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~642602239.js?contenthash=5dd5b4d316afbe01d44f IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (65368), with CRLF, LF line terminators Hash1ea40c81b7c0d78ffd81e8bd609b7712 709b19ede6cffeeb423282eb47426a79fc73dc77 120ac8aae036125e80bbc39d3d3e4d24403185d136ff79e0a1c6d37ed11d564d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~642602239.js?contenthash=5dd5b4d316afbe01d44f HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:26 GMT
content-type: text/javascript;charset=UTF-8
content-length: 75768
last-modified: Wed, 17 Apr 2024 23:43:34 GMT
etag: "ADKsXJ4gVkLR"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=114687
expires: Thu, 09 May 2024 21:22:53 GMT
content-disposition: inline;filename=f.txt
traceid: 13e36026-a062-4f09-b018-2a0d576a7b64
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~4b330692b.js?contenthash=32fdb0c2c16cbd1f7255 | 47.76.207.74 | 200 OK | 26 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~4b330692b.js?contenthash=32fdb0c2c16cbd1f7255 IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (25789), with CRLF, LF line terminators Hashe0f3da1794fff0dfd8044565f5e207f4 61ec8a7876edf2c0ea05e98ab2f29f81bd0b1029 0124d93365e70d2a3690976655b2ec78af06e687751c13d1a5ac6827a1397b31
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~4b330692b.js?contenthash=32fdb0c2c16cbd1f7255 HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:26 GMT
content-type: text/javascript;charset=UTF-8
content-length: 25957
last-modified: Wed, 17 Apr 2024 23:43:34 GMT
etag: "B6eLiWlkTkTt"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=114709
expires: Thu, 09 May 2024 21:23:15 GMT
content-disposition: inline;filename=f.txt
traceid: a6506cd9-d9cd-4ae7-8b8b-455872b12921
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~af55cc5d1.js?contenthash=4f7934fa0c61bb251d52 | 47.76.207.74 | 200 OK | 15 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~af55cc5d1.js?contenthash=4f7934fa0c61bb251d52 IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (14566), with CRLF, LF line terminators Hash426c592ac184fc8095880cffd32bcc64 0af2abf234a1d344e57c3ef5e0975ea8cbd457a7 9a73d8d9fee43c8e3a00c65fd73ea545505508b02c524fa897b4630a1dcd73b8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~af55cc5d1.js?contenthash=4f7934fa0c61bb251d52 HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:27 GMT
content-type: text/javascript;charset=UTF-8
content-length: 14734
last-modified: Wed, 17 Apr 2024 23:43:35 GMT
etag: "Ze8vApDyUjP7"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=115051
expires: Thu, 09 May 2024 21:28:58 GMT
content-disposition: inline;filename=f.txt
traceid: a7660ae1-dfcc-42be-8073-5393c37b4603
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~0c880f568.js?contenthash=93d22b575087d05a7708 | 47.76.207.74 | 200 OK | 7.7 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~0c880f568.js?contenthash=93d22b575087d05a7708 IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (7559), with CRLF, LF line terminators Hash4d07ac28d073f1c4c9a635aa73349ab1 e414831cced70dde4ae12878fb3bc754abe4e416 4c3da1236b6c315c03b2fa771c74bc0f6ff5d24caee230b2c8e1a1d2749317dc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~0c880f568.js?contenthash=93d22b575087d05a7708 HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:27 GMT
content-type: text/javascript;charset=UTF-8
content-length: 7727
last-modified: Tue, 07 May 2024 22:56:51 GMT
etag: "eVchsAqbAPQo"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=206812
expires: Fri, 10 May 2024 22:58:19 GMT
content-disposition: inline;filename=f.txt
traceid: 2bc1efc9-027a-4690-ab38-4cd7ec16e625
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~4b330692b.js?contenthash=555ff2496b7cbfc4085c | 47.76.207.74 | 200 OK | 36 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~4b330692b.js?contenthash=555ff2496b7cbfc4085c IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (36120), with CRLF, LF line terminators Hash7e46e39028a9687da69c5eee2a50a448 145389081ffcbd2934dbd7e0c0bfd3c80d377490 4fe1229d8239261a868454db1f335ea91127d2aaa5df9839851b15b1514810b9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~4b330692b.js?contenthash=555ff2496b7cbfc4085c HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:27 GMT
content-type: text/javascript;charset=UTF-8
content-length: 36288
last-modified: Wed, 17 Apr 2024 23:43:35 GMT
etag: "uTSuLNY40gEH"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=114567
expires: Thu, 09 May 2024 21:20:54 GMT
content-disposition: inline;filename=f.txt
traceid: b3662164-eef7-48c9-9522-ac7530652b0b
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~c1dfbefd5.js?contenthash=134d887ad734d9d34c75 | 47.76.207.74 | 200 OK | 55 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~c1dfbefd5.js?contenthash=134d887ad734d9d34c75 IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (54507), with CRLF, LF line terminators Hash52800b8a656a89817d44714ff7a5d272 67c3276201bfcb864770d778cc0faef82e13e312 a89a6aa3b202d0c40e15c7c53da9c097f3b46f4e74ca3597e84a62c44fae23b3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~c1dfbefd5.js?contenthash=134d887ad734d9d34c75 HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:27 GMT
content-type: text/javascript;charset=UTF-8
content-length: 54675
last-modified: Tue, 30 Apr 2024 22:30:35 GMT
etag: "L9lVo04OPhnr"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=67018
expires: Thu, 09 May 2024 08:08:25 GMT
content-disposition: inline;filename=f.txt
traceid: de8b277e-9617-49bf-a3ee-90485cf227b0
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/navevents.js?contenthash=3afb60572704da653a1f | 47.76.207.74 | 200 OK | 15 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/navevents.js?contenthash=3afb60572704da653a1f IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (14444), with CRLF, LF line terminators Hash66b0387c1fda9b561e87401ce815d326 1b7212a9674487d54442b1c8d38f7e11370476a7 b26bf19aaca851e843d3414d36f8f38b62bf47eac384ec959f289f53480df2fd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/navevents.js?contenthash=3afb60572704da653a1f HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:27 GMT
content-type: text/javascript;charset=UTF-8
content-length: 14612
last-modified: Tue, 07 May 2024 22:56:52 GMT
etag: "SK7YYy3BU7wg"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=206749
expires: Fri, 10 May 2024 22:57:16 GMT
content-disposition: inline;filename=f.txt
traceid: 009716cc-eb9b-49dd-9296-322d91dd2cce
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~d6e1df551.js?contenthash=8da9a53796fef4f15458 | 47.76.207.74 | 200 OK | 12 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~d6e1df551.js?contenthash=8da9a53796fef4f15458 IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (11729), with CRLF, LF line terminators Hash8fe9307ff58bdf59605f060afff2d3ef 7434e0a8c05100059e01f999ded484dc356f68f1 9c2d1853cd30af2e89ce713d608b7e383b808e65cd2abfac0dac86ff1e65ec22
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~d6e1df551.js?contenthash=8da9a53796fef4f15458 HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:27 GMT
content-type: text/javascript;charset=UTF-8
content-length: 11897
last-modified: Tue, 07 May 2024 22:56:51 GMT
etag: "t2Gi0_1Od523"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=206695
expires: Fri, 10 May 2024 22:56:22 GMT
content-disposition: inline;filename=f.txt
traceid: a0bd1fb0-95b8-428f-b615-390125f03229
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~2d6f640d9.js?contenthash=b790e6917cae44458be8 | 47.76.207.74 | 200 OK | 68 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~2d6f640d9.js?contenthash=b790e6917cae44458be8 IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (65368), with CRLF, LF line terminators Hash6bf9a71d9e164f521b6634f40298eb22 66a197476ba5a839945514e7b34eaae86bf28c3f 5110246c116b08fd69a9e86888b39a6e04659419a104952cc9ba233e03dd633b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~2d6f640d9.js?contenthash=b790e6917cae44458be8 HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:27 GMT
content-type: text/javascript;charset=UTF-8
content-length: 67841
last-modified: Tue, 30 Apr 2024 22:30:35 GMT
etag: "-DmPduwcJEWO"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=67039
expires: Thu, 09 May 2024 08:08:46 GMT
content-disposition: inline;filename=f.txt
traceid: af06f7a7-8b4c-422a-95dc-b30bb4042275
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~f036ce556.js?contenthash=7596e2084d8e091adc87 | 47.76.207.74 | 200 OK | 89 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~f036ce556.js?contenthash=7596e2084d8e091adc87 IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65366), with CRLF, LF line terminators Hash8719ce8ae7a5cb378bb10c93cedb2485 58987f0da639ca4ca74b64097f072c680655f29c 9577e1e29647f506eef71a7cb788c109b922b10f8d5189535981d58e98c8e244
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~f036ce556.js?contenthash=7596e2084d8e091adc87 HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:27 GMT
content-type: text/javascript;charset=UTF-8
content-length: 88814
last-modified: Tue, 30 Apr 2024 22:30:34 GMT
etag: "13Q9j_rg-NKa"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=66943
expires: Thu, 09 May 2024 08:07:10 GMT
content-disposition: inline;filename=f.txt
traceid: ba78ef15-64ff-4c46-9b6d-35b371674625
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english | 47.76.207.74 | 200 OK | 145 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typegzip compressed data, from Unix Size145 kB (144676 bytes) Hash567b6d3114c0884d42dd4e3fca82559e 3a64c8517588836cdcab05d7c98c2e7e444ed7cc 583b264652fe2140e755dce135d35655609caeb1168a62da64109eba56ff2f8d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/css;charset=UTF-8
last-modified: Sun, 09 Sep 2001 01:46:40 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=9153532
expires: Thu, 22 Aug 2024 12:10:15 GMT
content-disposition: inline;filename=f.txt
traceid: eaac1cf43a17151750832954259d0001
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/shared/css/buttons.css?v=PUJIfhtcQn7W&l=english | 47.76.207.74 | 200 OK | 34 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/shared/css/buttons.css?v=PUJIfhtcQn7W&l=english IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeASCII text, with CRLF, LF line terminators Hash3d42487e1b5c427ed66f2be54948561b 450b970e36aeb1375844c48a412be7caf5d5c447 60a5b96dd853a80363de37ae72b72ceada056cf781cd9dd2ac74869030d6f76d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/shared/css/buttons.css?v=PUJIfhtcQn7W&l=english HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/css;charset=UTF-8
last-modified: Sun, 09 Sep 2001 01:46:40 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=3296654
expires: Sat, 15 Jun 2024 17:15:37 GMT
content-disposition: inline;filename=f.txt
traceid: eaac1cf43a17151750832864258d0001
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/localization/main_english-json.js?contenthash=cfcee568a9b043acaadb | 47.76.207.74 | 200 OK | 217 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/localization/main_english-json.js?contenthash=cfcee568a9b043acaadb IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
Size217 kB (217392 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/localization/main_english-json.js?contenthash=cfcee568a9b043acaadb HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:26 GMT
content-type: text/javascript;charset=UTF-8
last-modified: Tue, 30 Apr 2024 22:30:38 GMT
etag: "8SfJaG802sNm"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=66994
expires: Thu, 09 May 2024 08:08:00 GMT
content-disposition: inline;filename=f.txt
traceid: 75f204ee-3e4e-4c22-9f93-860dd01614ba
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~9e353dc2d.js?contenthash=a354f433049b20f1e568 | 47.76.207.74 | 200 OK | 305 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~9e353dc2d.js?contenthash=a354f433049b20f1e568 IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
Size305 kB (304560 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~9e353dc2d.js?contenthash=a354f433049b20f1e568 HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:26 GMT
content-type: text/javascript;charset=UTF-8
last-modified: Wed, 17 Apr 2024 23:43:35 GMT
etag: "VbnqwNW0wGgK"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=114698
expires: Thu, 09 May 2024 21:23:04 GMT
content-disposition: inline;filename=f.txt
traceid: acaf26b7-9290-4e45-96d0-28e040aed23a
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/favicon.ico | 47.76.207.74 | 200 OK | 39 kB |
URL GET HTTP/2steamproxy.net/favicon.ico IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeMS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel Hash231913fdebabcbe65f4b0052372bde56 553909d080e4f210b64dc73292f3a111d5a0781f 9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:26 GMT
content-type: image/x-icon
content-length: 38554
last-modified: Tue, 18 Sep 2018 23:32:59 GMT
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-allow-method: *
access-control-allow-methods: POST, GET, HEAD, OPTIONS
access-control-allow-origin: https://steamproxy.net
access-control-expose-headers: X-eresult,X-error_message
cache-control: public,max-age=86400
expires: Fri, 06 Oct 2023 14:47:53 GMT
origin: https://steamproxy.net
set-cookie: uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; Path=/; Domain=steamproxy.net
x-proxy-hostname: steam-session-cluster-5565ddcfbf-gql6g
traceid: eaac1cf43a17151750863324271d0001
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/css/applications/community/profile.css?contenthash=c73a20a00d964eabeb83 | 47.76.207.74 | 200 OK | 75 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/css/applications/community/profile.css?contenthash=c73a20a00d964eabeb83 IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/css/applications/community/profile.css?contenthash=c73a20a00d964eabeb83 HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:27 GMT
content-type: text/css;charset=UTF-8
last-modified: Wed, 17 Apr 2024 23:43:35 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: public, must-revalidate, max-age=124326
expires: Fri, 10 May 2024 00:03:33 GMT
content-disposition: inline;filename=f.txt
traceid: eaac1cf43a17151750871614276d0001
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/css/applications/community/chunk~f036ce556.css?contenthash=65008c72e7e5586e0c2d | 47.76.207.74 | 200 OK | 31 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/css/applications/community/chunk~f036ce556.css?contenthash=65008c72e7e5586e0c2d IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeASCII text, with very long lines (19112), with CRLF, LF line terminators Hash668d9b56f55f6d79ddd295267b68518a ad521277e7ba515feee28e4fb3cd62afdb6ca218 ddc12eff57a9e957968af6b2b8619545dd26f3fec3d85c4c607e5d0560fed7d5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/css/applications/community/chunk~f036ce556.css?contenthash=65008c72e7e5586e0c2d HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:27 GMT
content-type: text/css;charset=UTF-8
last-modified: Wed, 17 Apr 2024 23:43:35 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: public, must-revalidate, max-age=114587
expires: Thu, 09 May 2024 21:21:14 GMT
content-disposition: inline;filename=f.txt
traceid: eaac1cf43417151750871594301d0001
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/profile.js?contenthash=eae8a6c0a3a2ac2c6b23 | 47.76.207.74 | 200 OK | 141 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/profile.js?contenthash=eae8a6c0a3a2ac2c6b23 IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
Size141 kB (140987 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/profile.js?contenthash=eae8a6c0a3a2ac2c6b23 HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:27 GMT
content-type: text/javascript;charset=UTF-8
content-length: 140987
last-modified: Tue, 07 May 2024 22:56:52 GMT
etag: "iDHQvcsLrfpU"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=206796
expires: Fri, 10 May 2024 22:58:03 GMT
content-disposition: inline;filename=f.txt
traceid: cb469476-f4e2-4d95-8b8c-931274022a4c
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/localization/shared_english-json.js?contenthash=e79979dc6c0eafa143d4 | 47.76.207.74 | 200 OK | 187 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/localization/shared_english-json.js?contenthash=e79979dc6c0eafa143d4 IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
Size187 kB (187030 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/localization/shared_english-json.js?contenthash=e79979dc6c0eafa143d4 HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:26 GMT
content-type: text/javascript;charset=UTF-8
last-modified: Tue, 07 May 2024 22:56:52 GMT
etag: "YW_taF7QWSiC"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=206820
expires: Fri, 10 May 2024 22:58:26 GMT
content-disposition: inline;filename=f.txt
traceid: bf1f0729-f2c2-4626-9e97-ad0a8f25b01c
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/css/applications/community/main.css?v=L7WZiiqgcxXO&l=english | 47.76.207.74 | 200 OK | 122 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/css/applications/community/main.css?v=L7WZiiqgcxXO&l=english IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
Size122 kB (121681 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/css/applications/community/main.css?v=L7WZiiqgcxXO&l=english HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/css;charset=UTF-8
last-modified: Sun, 09 Sep 2001 01:46:40 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=15499574
expires: Sun, 03 Nov 2024 22:57:37 GMT
content-disposition: inline;filename=f.txt
traceid: eaac1cf43917151750836264381d0001
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&l=english | 47.76.207.74 | 200 OK | 19 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&l=english IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeASCII text, with very long lines (1667), with CRLF, LF line terminators Hashb0720870ccc27df5fa6d1669cc098251 8800fa19f2eca67bbdd0cde15ac5e300f0240382 ed913aa6f584d262be7eae0f789e88bcfd93bbaddd59a37a3fe39d6ee96880d5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&l=english HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/css;charset=UTF-8
last-modified: Sun, 09 Sep 2001 01:46:40 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=14291952
expires: Sun, 20 Oct 2024 23:30:35 GMT
content-disposition: inline;filename=f.txt
traceid: eaac1cf43317151750832894349d0001
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/css/applications/community/chunk~642602239.css?contenthash=59316afb14f0823f60a9 | 47.76.207.74 | 200 OK | 56 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/css/applications/community/chunk~642602239.css?contenthash=59316afb14f0823f60a9 IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeASCII text, with very long lines (14187), with CRLF, LF line terminators Hash9a581cd757ca917f8459c6d2fcf8ee85 5de0e25f0136109c9805718172da4607fdfb9953 6d63db815e1b5befae281fd23c1f60afb98b21dffe8768d47343627b34f6d88b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/css/applications/community/chunk~642602239.css?contenthash=59316afb14f0823f60a9 HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:27 GMT
content-type: text/css;charset=UTF-8
last-modified: Wed, 17 Apr 2024 23:43:34 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: public, must-revalidate, max-age=58438
expires: Thu, 09 May 2024 05:45:25 GMT
content-disposition: inline;filename=f.txt
traceid: eaac1cf43317151750871604364d0001
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~c18a43282.js?contenthash=fb0b0d449ada85165b39 | 47.76.207.74 | 200 OK | 374 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~c18a43282.js?contenthash=fb0b0d449ada85165b39 IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
Size374 kB (374278 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~c18a43282.js?contenthash=fb0b0d449ada85165b39 HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:27 GMT
content-type: text/javascript;charset=UTF-8
last-modified: Tue, 07 May 2024 22:56:51 GMT
etag: "lPJJKjm1pG7C"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=206870
expires: Fri, 10 May 2024 22:59:17 GMT
content-disposition: inline;filename=f.txt
traceid: 03dea2f6-7617-4efd-80e1-a62bdefc099b
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~25d238eb8.js?contenthash=ac954d69fdf4b21a0a54 | 47.76.207.74 | 200 OK | 54 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~25d238eb8.js?contenthash=ac954d69fdf4b21a0a54 IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (54246), with CRLF, LF line terminators Hash9f60d06a389086525d0fc785ccf7b9dd 819944366c2ac812d9701b6d8897febe2e55f84a eb2a89e1657dd3931a5cd52ea725f5a184be9ba051d728ca3708027ae91a2d30
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~25d238eb8.js?contenthash=ac954d69fdf4b21a0a54 HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:26 GMT
content-type: text/javascript;charset=UTF-8
content-length: 54414
last-modified: Tue, 07 May 2024 22:56:51 GMT
etag: "b4L66FlbD8AU"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=206758
expires: Fri, 10 May 2024 22:57:24 GMT
content-disposition: inline;filename=f.txt
traceid: 97c9910a-ad22-4b52-b94c-93228afaf1b5
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~7bb437d7f.js?contenthash=db9788aa72093ef41f9a | 47.76.207.74 | 200 OK | 786 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~7bb437d7f.js?contenthash=db9788aa72093ef41f9a IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeJavaScript source, ASCII text, with very long lines (65046), with CRLF, LF line terminators Size786 kB (785953 bytes) Hash76b7c0d2974645712e45905ab08b6a04 fb74ed23bcac12f9f656899ab9262f63b1d1d62e 7dbedc6a001ce4a7bcd36a3738318df69105fe65031ac51838e8ab7c8fa44322
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/libraries~7bb437d7f.js?contenthash=db9788aa72093ef41f9a HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:26 GMT
content-type: text/javascript;charset=UTF-8
last-modified: Wed, 17 Apr 2024 23:43:34 GMT
etag: "pJhSJXMB3PrA"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=114833
expires: Thu, 09 May 2024 21:25:19 GMT
content-disposition: inline;filename=f.txt
traceid: a245055c-e250-49be-bfac-e03fadf8e1eb
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/css/applications/community/chunk~c18a43282.css?contenthash=2951747b428e607bd9cf | 47.76.207.74 | 200 OK | 113 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/css/applications/community/chunk~c18a43282.css?contenthash=2951747b428e607bd9cf IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
Size113 kB (113129 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/css/applications/community/chunk~c18a43282.css?contenthash=2951747b428e607bd9cf HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:27 GMT
content-type: text/css;charset=UTF-8
last-modified: Tue, 07 May 2024 22:56:50 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: public, must-revalidate, max-age=206632
expires: Fri, 10 May 2024 22:55:19 GMT
content-disposition: inline;filename=f.txt
traceid: eaac1cf43417151750871574300d0001
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~642602239.js?contenthash=ce169d843b8388128d8f | 47.76.207.74 | 200 OK | 144 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~642602239.js?contenthash=ce169d843b8388128d8f IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
Size144 kB (144548 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/javascript/applications/community/chunk~642602239.js?contenthash=ce169d843b8388128d8f HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:27 GMT
content-type: text/javascript;charset=UTF-8
last-modified: Tue, 30 Apr 2024 22:30:35 GMT
etag: "HDrfRVzI40hy"
vary: Accept-Encoding
cache-control: public, must-revalidate, max-age=67024
expires: Thu, 09 May 2024 08:08:31 GMT
content-disposition: inline;filename=f.txt
traceid: 87c3f486-8add-4b41-babe-6e4f837bd770
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=english | 47.76.207.74 | 200 OK | 2.7 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=english IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeASCII text, with very long lines (2894), with no line terminators Hashe5ccd47772ed0cb1c50e38a08b118770 a06ea23e35ed72052e512bb30bbca8d150723f46 dd5f5d4bcf9497df3b926c6187d356db46e5d552e118ce8abb73f6eb590332ca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=english HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/css;charset=UTF-8
last-modified: Sun, 09 Sep 2001 01:46:40 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=14096726
expires: Fri, 18 Oct 2024 17:16:49 GMT
content-disposition: inline;filename=f.txt
traceid: eaac1cf43417151750832884288d0001
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| steamproxy.net/community-akamai-steamstatic-com/js/public/css/skin_1/profilev2.css?v=M_qL4gO2sKII&l=english | 47.76.207.74 | 200 OK | 89 kB |
URL GET HTTP/2steamproxy.net/community-akamai-steamstatic-com/js/public/css/skin_1/profilev2.css?v=M_qL4gO2sKII&l=english IP47.76.207.74:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://steamproxy.net/id/shadesofshit CertificateIssuerBeijing Xinchacha Credit Management Co., Ltd. Subject*.steamproxy.net FingerprintF7:94:EC:07:B5:5F:02:32:8B:A9:AD:2F:D4:4D:1A:60:85:B9:A4:B8 ValidityWed, 03 Jan 2024 09:50:43 GMT - Thu, 02 Jan 2025 09:50:42 GMT
File typeASCII text, with very long lines (1627), with CRLF, LF line terminators Hash33fa8be203b6b0a208b41473886cf984 530bf83f1634f9601d9488222ddfed670efa4349 5fee6ae1c3520cb28bf57b4b285f48c0819df5162bb6ccd2b8651e479db10af9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-akamai-steamstatic-com/js/public/css/skin_1/profilev2.css?v=M_qL4gO2sKII&l=english HTTP/1.1
Host: steamproxy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://steamproxy.net/id/shadesofshit
Cookie: sessionid=747399a5b6a707d554b7e44f; steamCountry=HK%7Cb08f7eb372d95d6bf07bfc01019b9399; uid=9a5850ef-604c-4fe2-9d89-4648a9b19b4b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 13:31:23 GMT
content-type: text/css;charset=UTF-8
last-modified: Sun, 09 Sep 2001 01:46:40 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=11870415
expires: Sun, 22 Sep 2024 22:51:38 GMT
content-disposition: inline;filename=f.txt
traceid: eaac1cf43417151750832924289d0001
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
|
|