{"report_id":"18fdc525-8309-43b8-aa77-f26b8929b56d","version":6,"status":"done","tags":[],"date":"2025-10-17T06:08:19Z","url":{"schema":"http","addr":"arxide.com/check-steam","fqdn":"arxide.com","domain":"arxide.com","tld":"com"},"ip":{"addr":"84.38.181.8","port":0,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"arxide.com/check-steam","fqdn":"arxide.com","domain":"arxide.com","tld":"com"},"title":"Проверка Steam аккаунта"},"submit":{"url":{"schema":"http","addr":"arxide.com/check-steam","fqdn":"arxide.com","domain":"arxide.com","tld":"com"},"ip":{"addr":"84.38.181.8","port":0,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-21T06:08:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"arxide.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"arxide.com","ip":{"addr":"84.38.181.8","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2021-07-19","domain_rank":0,"first_seen":"2025-10-17T02:54:34.459356Z","last_seen":"2025-10-17T02:54:34.459356Z","alert_count":11,"request_count":11,"received_data":338131,"sent_data":5596,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-12T22:12:10.358486Z","alert_count":0,"request_count":1,"received_data":369611,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"arxide.com/check-steam","fqdn":"arxide.com","domain":"arxide.com","tld":"com"},"ip":{"addr":"84.38.181.8","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"143a3eaa9e71f33ed2351e476aab4978","sha1":"a15057a85fa2d81ab2f8cb3919f7450bd253397e","sha256":"dcb58df1926d764b537ce64b3ce789184d2382ba088f1a4b640d5d7c2938200d","sha512":"b87e657eb5abe8f4692e1bb20952d469c05bde6bee6f7e067fd5481acb444904b8abb294898c982e344d4a918cdde6d6233682a19f75ff5ee1442cd05d8b0168","ssdeep":"","tlshash":"d6e0f1a53cdc502183b7016967eb600db416793e1c0eae24f90dc4512f6edbd082b50c","size":408,"data":"","first_seen":"2025-10-17T02:54:38.934812Z","last_seen":"2025-10-17T06:08:21.586934Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arxide.com/check-steam","fqdn":"arxide.com","domain":"arxide.com","tld":"com"},"ip":{"addr":"84.38.181.8","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"2298c7fe7f0bd9e33da9b088a0a1d11c","sha1":"6ba070d11744f76d928ca0a1f54f803025519bcd","sha256":"82c3980bd60d21d48b9d6cdc93d3f720dc52ada22ae414b947a7c9a0baf38a3c","sha512":"02d1e6dab9c317be545660046af7afc9b74565c367d87135eb003401ad2dd1f381142f06b83646e9056fcf8dbd071553f129a046c3de52572298dc8d3959b4a9","ssdeep":"","tlshash":"44c08c88250a0c7041ab27008b3fb644b0023214a4e06a21494d73044d20e03db54c28","size":153,"data":"","first_seen":"2025-10-17T02:54:38.938027Z","last_seen":"2025-10-17T06:08:21.595328Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arxide.com/js/basic/jquery.js","fqdn":"arxide.com","domain":"arxide.com","tld":"com"},"ip":{"addr":"84.38.181.8","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e4bb227fb55271bfe9c9d4a09147bd8","sha1":"156837f75f6600ccb602b4efcbd393636c33f35e","sha256":"ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127","sha512":"f7810ef9df875a7fdfa7228f7e2f95dd34e18b57f56a46383198ebcc591e32f633b0d73cc6b271fbc669347f7fdc114cce6a6b43681104b25084fe2a1e7bee49","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:eIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"589309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-07-28T09:33:41.77549Z","times_seen":10701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-122JGDFY13","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfe578e6d5b9c31adaea9bcb6b17b7e1","sha1":"d9cbfe36d095ce9a7a72d163723678d374a298c6","sha256":"f43d6af66dff4cc327910166a135a11c0790e751824d948a293eb15479ad96ac","sha512":"c691c5668040a1f6398be5274c079f62b39c5f8cfa9d76927c4f59229dec3b91355ba1850fd3410f6216129fb95ee96b13f3488f9c804d4d937e512aeb8db18b","ssdeep":"6144:rBc6tQSyOe+3y4nkEt7F8KWjxSqpRjeWvkAX6HJLGy16f+xwuuvg:C6rRR3y4nkEt7F0EqPeKRy1Yg","tlshash":"1e741acd73c674668392b478503f018ba17b69a2f84cc895f186dce42e74a9a4277f3d","size":369007,"data":"","first_seen":"2025-10-17T02:54:38.911907Z","last_seen":"2025-10-17T06:08:21.515444Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"arxide.com/css/basic.css","fqdn":"arxide.com","domain":"arxide.com","tld":"com"},"ip":{"addr":"84.38.181.8","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arxide.com/check-steam","date":"2025-10-17T06:07:58.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"arxide.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 21:27:19 GMT","end":"Thu, 04 Dec 2025 21:27:18 GMT"},"fingerprint":{"sha1":"0E:47:27:5E:B6:A0:47:8D:76:F9:8E:2A:EF:F8:CE:01:38:03:6C:10","sha256":"BF:FE:F9:FA:0F:66:56:7C:19:CE:A2:B9:D1:14:1A:A0:DA:AA:14:90:69:80:4D:95:58:F4:CA:F7:7E:49:AD:8F"}}},"request":{"raw":"GET /css/basic.css HTTP/1.1\r\nHost: arxide.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arxide.com/check-steam\r\nCookie: PHPSESSID=b4223c264384a9de58f5aa5fc3c0fbaa\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 17 Oct 2025 06:07:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jul 2024 07:52:15 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\nexpires: Mon, 27 Oct 2025 06:07:58 GMT\r\ncache-control: max-age=864000, private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12189,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1936)","md5":"91829b59fab3fd3528b7597a4fcbac3d","sha1":"422913434c60666d274e7bf0a074b06aaa63ae41","sha256":"ab2fb0e57d6807dac66a20020e54f48ff35832f6fee183c7e8b7b6679130283d","sha512":"3e6cc01191999922504fee93b6f5061778c4e9205f1b2d8ea503ed4b23f954c7cbf522ec9dd737b32b091a936802bc01f853132edfa3c3889ccc478f03e63436","ssdeep":"192:b3k5HB6Gb3sadTPrmP3131KBGEXOtxurxGuPte/do/QdHXFgdrOJ+h:b0lB6nKPSf6GEXOtxurxGatei/K0Kk","tlshash":"4142a5314a81211df16bd67bb5d4a7ee329a4417f8230b6dfa257632df4289b0373b81","first_seen":"2025-10-17T02:54:38.896959Z","last_seen":"2025-10-17T06:08:21.502449Z","times_seen":2,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"arxide.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-122JGDFY13","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arxide.com/check-steam","date":"2025-10-17T06:07:58.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-122JGDFY13 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arxide.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 17 Oct 2025 06:07:58 GMT\r\nexpires: Fri, 17 Oct 2025 06:07:58 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 128087\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":369007,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"bfe578e6d5b9c31adaea9bcb6b17b7e1","sha1":"d9cbfe36d095ce9a7a72d163723678d374a298c6","sha256":"f43d6af66dff4cc327910166a135a11c0790e751824d948a293eb15479ad96ac","sha512":"c691c5668040a1f6398be5274c079f62b39c5f8cfa9d76927c4f59229dec3b91355ba1850fd3410f6216129fb95ee96b13f3488f9c804d4d937e512aeb8db18b","ssdeep":"6144:rBc6tQSyOe+3y4nkEt7F8KWjxSqpRjeWvkAX6HJLGy16f+xwuuvg:C6rRR3y4nkEt7F0EqPeKRy1Yg","tlshash":"1e741acd73c674668392b478503f018ba17b69a2f84cc895f186dce42e74a9a4277f3d","first_seen":"2025-10-17T02:54:38.911907Z","last_seen":"2025-10-17T06:08:21.515444Z","times_seen":2,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":102,"dns":0,"connect":21,"send":0,"wait":41,"receive":57,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arxide.com/fonts/nv/Bold.woff2","fqdn":"arxide.com","domain":"arxide.com","tld":"com"},"ip":{"addr":"84.38.181.8","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arxide.com/check-steam","date":"2025-10-17T06:07:58.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"arxide.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 21:27:19 GMT","end":"Thu, 04 Dec 2025 21:27:18 GMT"},"fingerprint":{"sha1":"0E:47:27:5E:B6:A0:47:8D:76:F9:8E:2A:EF:F8:CE:01:38:03:6C:10","sha256":"BF:FE:F9:FA:0F:66:56:7C:19:CE:A2:B9:D1:14:1A:A0:DA:AA:14:90:69:80:4D:95:58:F4:CA:F7:7E:49:AD:8F"}}},"request":{"raw":"GET /fonts/nv/Bold.woff2 HTTP/1.1\r\nHost: arxide.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arxide.com/css/basic.css\r\nCookie: PHPSESSID=b4223c264384a9de58f5aa5fc3c0fbaa\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 17 Oct 2025 06:07:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 113456\r\nlast-modified: Tue, 16 Jul 2024 21:27:55 GMT\r\nexpires: Mon, 27 Oct 2025 06:07:58 GMT\r\ncache-control: max-age=864000, private\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113456,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 113456, version 1.0","md5":"a52f203435b036cbf510cbd123a1040c","sha1":"5e1dc63df674f46badbade934b4091d46a481782","sha256":"fbe3d3f5d3303d462a0e1ce63c4cb3e6dfa502763b7c297226141d6391757d3a","sha512":"ccaa6096ac16f56e2cb6bc727fed0fd91dedec10a5ab6935d73703adc87fe733822a516e042992fa1da2b356d6eb3f8e7cc24a73bdee5e1282bac441362b4a33","ssdeep":"3072:aKtbK4A9H2Z2F8BEjNLMoe/dEchghPrMhgzK:aCAkoSEdMoeFEjTMhz","tlshash":"08b312ec1085295fdce8eb766bba2cc6da100aacd36e64bdf94eb0301e1d093395d471","first_seen":"2023-06-15T00:08:55Z","last_seen":"2026-07-24T05:57:24.907407Z","times_seen":126,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":362,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"arxide.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arxide.com/check-steam","fqdn":"arxide.com","domain":"arxide.com","tld":"com"},"ip":{"addr":"84.38.181.8","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-17T06:07:57.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"arxide.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 21:27:19 GMT","end":"Thu, 04 Dec 2025 21:27:18 GMT"},"fingerprint":{"sha1":"0E:47:27:5E:B6:A0:47:8D:76:F9:8E:2A:EF:F8:CE:01:38:03:6C:10","sha256":"BF:FE:F9:FA:0F:66:56:7C:19:CE:A2:B9:D1:14:1A:A0:DA:AA:14:90:69:80:4D:95:58:F4:CA:F7:7E:49:AD:8F"}}},"request":{"raw":"GET /check-steam HTTP/1.1\r\nHost: arxide.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 17 Oct 2025 06:07:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=b4223c264384a9de58f5aa5fc3c0fbaa; path=/\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5681,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"91b1be0bd422edd5752349894b75f296","sha1":"2ee7769ac1018c5c1f6e6cf85b0e7f81a07cff98","sha256":"a531c9936d4b0ca461b52b8d83c6052c211a83e12badfd41d2f6d1202a930d64","sha512":"ad6b722ddbdf85f2dae63f8cf26a8917d95038e638bdac32f213b73537d0256c9a4af481413e6e7701e103e94a7dee81673ca4578336e48a4d9436e6165926ee","ssdeep":"96:y5ANDgb+XUnOg+RvKbITG6YZDZwYVSvSIxu6wyDxkZXv4mJAMX:y2gb+XUnOgARTG9ZDD+xUyDxkZrJAMX","tlshash":"fac14462790d5cbe0202a12bd236790db84bddfaaf1b6d2061d617bf36e0654cc27356","first_seen":"2025-10-17T02:54:38.906744Z","last_seen":"2025-10-17T06:08:21.527406Z","times_seen":2,"resource_available":false,"data":null}},"time_used":743,"timings":{"blocked":245,"dns":69,"connect":60,"send":0,"wait":254,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"arxide.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arxide.com/img/page/steam2.png","fqdn":"arxide.com","domain":"arxide.com","tld":"com"},"ip":{"addr":"84.38.181.8","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arxide.com/check-steam","date":"2025-10-17T06:07:58.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"arxide.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 21:27:19 GMT","end":"Thu, 04 Dec 2025 21:27:18 GMT"},"fingerprint":{"sha1":"0E:47:27:5E:B6:A0:47:8D:76:F9:8E:2A:EF:F8:CE:01:38:03:6C:10","sha256":"BF:FE:F9:FA:0F:66:56:7C:19:CE:A2:B9:D1:14:1A:A0:DA:AA:14:90:69:80:4D:95:58:F4:CA:F7:7E:49:AD:8F"}}},"request":{"raw":"GET /img/page/steam2.png HTTP/1.1\r\nHost: arxide.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arxide.com/check-steam\r\nCookie: PHPSESSID=b4223c264384a9de58f5aa5fc3c0fbaa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 17 Oct 2025 06:07:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 11897\r\nlast-modified: Mon, 06 Sep 2021 14:49:52 GMT\r\nexpires: Mon, 27 Oct 2025 06:07:58 GMT\r\ncache-control: max-age=864000, private\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11897,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 691 x 361, 8-bit colormap, non-interlaced","md5":"47e1f2825edba69a7fe93ea3341ecb17","sha1":"3eaa25aa018d3f69ffcdd00ee83c47771a8587ea","sha256":"473d79c06cf8ad87b883add6b86e6097a9315c38ae4b4517eada3dd2fa1f5403","sha512":"cefdd903cd9b03b88270cba0a19e7c531f9155e16c39134eaf9083fdca5494f8f446b38b420bd2e611cf615a889bb84f1d79df8d59eed737b28652e955dbb7e1","ssdeep":"192:vlphVhiZXYlDB88uw8VsTOAIgB3ONnVyZ1/9aUon8g3kG8eeXaARqlG6rtSuRxPX:vvIZXYD8GmAZ91aUo3kGTeGrtSun8XA","tlshash":"df32b0b347e2eccdca488cbe0158197354303d2cae45f059690dbc2b96fe58364e2977","first_seen":"2025-10-17T02:54:38.931806Z","last_seen":"2025-10-17T06:08:21.532843Z","times_seen":2,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"arxide.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arxide.com/img/basic/name2.png","fqdn":"arxide.com","domain":"arxide.com","tld":"com"},"ip":{"addr":"84.38.181.8","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arxide.com/check-steam","date":"2025-10-17T06:07:58.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"arxide.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 21:27:19 GMT","end":"Thu, 04 Dec 2025 21:27:18 GMT"},"fingerprint":{"sha1":"0E:47:27:5E:B6:A0:47:8D:76:F9:8E:2A:EF:F8:CE:01:38:03:6C:10","sha256":"BF:FE:F9:FA:0F:66:56:7C:19:CE:A2:B9:D1:14:1A:A0:DA:AA:14:90:69:80:4D:95:58:F4:CA:F7:7E:49:AD:8F"}}},"request":{"raw":"GET /img/basic/name2.png HTTP/1.1\r\nHost: arxide.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arxide.com/css/basic.css\r\nCookie: PHPSESSID=b4223c264384a9de58f5aa5fc3c0fbaa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 17 Oct 2025 06:07:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 1094\r\nlast-modified: Mon, 19 Jul 2021 11:54:04 GMT\r\nexpires: Mon, 27 Oct 2025 06:07:58 GMT\r\ncache-control: max-age=864000, private\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1094,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 243 x 44, 8-bit colormap, non-interlaced","md5":"f42e9571a4cb0885d3355eca1a9c1ad2","sha1":"0836b47d61fa19a2aa69de70a1016bd3dd17089f","sha256":"8cbf648b087ac99df12434a869b8de4c3f7f91320d85768145ae8212052d0ff6","sha512":"b6432f8893a17ad7bf6dfbcc4a0aa8bf29821fdc99ffda284ededa5144ff34aa72f695a959b6381946a537c7a415d965dd311700f10966ce9f085696e6cc0a05","ssdeep":"","tlshash":"7f11c8d1e1f3fbe488b565853031d1b0804a3f5181d86b84f025fc531eb21aa16d2402","first_seen":"2025-10-17T02:54:38.921258Z","last_seen":"2025-10-17T06:08:21.54332Z","times_seen":2,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"arxide.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arxide.com/fonts/nv/Regular.woff2","fqdn":"arxide.com","domain":"arxide.com","tld":"com"},"ip":{"addr":"84.38.181.8","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arxide.com/check-steam","date":"2025-10-17T06:07:58.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"arxide.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 21:27:19 GMT","end":"Thu, 04 Dec 2025 21:27:18 GMT"},"fingerprint":{"sha1":"0E:47:27:5E:B6:A0:47:8D:76:F9:8E:2A:EF:F8:CE:01:38:03:6C:10","sha256":"BF:FE:F9:FA:0F:66:56:7C:19:CE:A2:B9:D1:14:1A:A0:DA:AA:14:90:69:80:4D:95:58:F4:CA:F7:7E:49:AD:8F"}}},"request":{"raw":"GET /fonts/nv/Regular.woff2 HTTP/1.1\r\nHost: arxide.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arxide.com/css/basic.css\r\nCookie: PHPSESSID=b4223c264384a9de58f5aa5fc3c0fbaa\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 17 Oct 2025 06:07:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 82424\r\nlast-modified: Tue, 16 Jul 2024 21:28:15 GMT\r\nexpires: Mon, 27 Oct 2025 06:07:58 GMT\r\ncache-control: max-age=864000, private\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82424,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 82424, version 1.0","md5":"a20cccade010cd83d2ca6f5919302f96","sha1":"8f2878cbb1920e4e2bb39cc6ee4bc8123e7cbfd2","sha256":"d3a07a6d1e7d3a08c676c729dfca29376ed968be201f2595f91394f45b23ee44","sha512":"1310322de93dcf75200a0077cb5a1fd4e69a52a476efd8418becea4385490006b47ea8f91eb28d8e2b1263b7a7479cc3b63a21d51e8eb781a259ef98e223aa64","ssdeep":"1536:g1rrDHP5KjV0w8qrPMXzNPN0iAmB3KKlvKqfgVrDG2cGxI:gdDHKPVPMXzNPnEKlvKyo6V","tlshash":"1d831296a7ec73d09893dcdf24b11a3c70987bacf3d4dfa65ec1bae930a914044b1465","first_seen":"2025-10-17T02:54:38.924277Z","last_seen":"2025-10-17T06:08:21.546573Z","times_seen":2,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":313,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"arxide.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arxide.com/js/basic/jquery.js","fqdn":"arxide.com","domain":"arxide.com","tld":"com"},"ip":{"addr":"84.38.181.8","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arxide.com/check-steam","date":"2025-10-17T06:07:58.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"arxide.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 21:27:19 GMT","end":"Thu, 04 Dec 2025 21:27:18 GMT"},"fingerprint":{"sha1":"0E:47:27:5E:B6:A0:47:8D:76:F9:8E:2A:EF:F8:CE:01:38:03:6C:10","sha256":"BF:FE:F9:FA:0F:66:56:7C:19:CE:A2:B9:D1:14:1A:A0:DA:AA:14:90:69:80:4D:95:58:F4:CA:F7:7E:49:AD:8F"}}},"request":{"raw":"GET /js/basic/jquery.js HTTP/1.1\r\nHost: arxide.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arxide.com/check-steam\r\nCookie: PHPSESSID=b4223c264384a9de58f5aa5fc3c0fbaa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 17 Oct 2025 06:07:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jul 2021 11:00:06 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\nexpires: Mon, 27 Oct 2025 06:07:58 GMT\r\ncache-control: max-age=864000, private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"3e4bb227fb55271bfe9c9d4a09147bd8","sha1":"156837f75f6600ccb602b4efcbd393636c33f35e","sha256":"ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127","sha512":"f7810ef9df875a7fdfa7228f7e2f95dd34e18b57f56a46383198ebcc591e32f633b0d73cc6b271fbc669347f7fdc114cce6a6b43681104b25084fe2a1e7bee49","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:eIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"589309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-07-28T09:33:41.77549Z","times_seen":10701,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"arxide.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arxide.com/img/page/steam.png","fqdn":"arxide.com","domain":"arxide.com","tld":"com"},"ip":{"addr":"84.38.181.8","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arxide.com/check-steam","date":"2025-10-17T06:07:58.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"arxide.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 21:27:19 GMT","end":"Thu, 04 Dec 2025 21:27:18 GMT"},"fingerprint":{"sha1":"0E:47:27:5E:B6:A0:47:8D:76:F9:8E:2A:EF:F8:CE:01:38:03:6C:10","sha256":"BF:FE:F9:FA:0F:66:56:7C:19:CE:A2:B9:D1:14:1A:A0:DA:AA:14:90:69:80:4D:95:58:F4:CA:F7:7E:49:AD:8F"}}},"request":{"raw":"GET /img/page/steam.png HTTP/1.1\r\nHost: arxide.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arxide.com/check-steam\r\nCookie: PHPSESSID=b4223c264384a9de58f5aa5fc3c0fbaa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 17 Oct 2025 06:07:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 12397\r\nlast-modified: Mon, 06 Sep 2021 14:49:52 GMT\r\nexpires: Mon, 27 Oct 2025 06:07:58 GMT\r\ncache-control: max-age=864000, private\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12397,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 666 x 375, 8-bit colormap, non-interlaced","md5":"c965d56b0113ff7b3b340377e8becd1a","sha1":"c9247e682c4d12665fdcc9da0793c2c13d2bd400","sha256":"0c244d82ab96faf6f4b7842a156e62589d19f038811cb8f816e5c701e3dfac16","sha512":"d1d8128ae16a98592dcb29ab6fce4e0d43772c7f2f188d405db453856f7c68f7f33858a55dd4ea828bd507f13bb44ce02215cdf97486f0e4b35c013fa0062a23","ssdeep":"192:Z6xE4qthtiabuZFpSNjFnNeV4rvJAO7uLRP/KJVXSnp+iI15H1rgxwRDGAS1tE5+:kx+PtiawwPNrv66XYphIP1kEvS1AZk","tlshash":"dd42afb53921a4cce1df19f2de56cfea4658193efe2a6759d0444619a943fa133f0308","first_seen":"2025-10-17T02:54:38.928476Z","last_seen":"2025-10-17T06:08:21.557175Z","times_seen":2,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"arxide.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arxide.com/img/basic/name.png","fqdn":"arxide.com","domain":"arxide.com","tld":"com"},"ip":{"addr":"84.38.181.8","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arxide.com/check-steam","date":"2025-10-17T06:07:58.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"arxide.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 21:27:19 GMT","end":"Thu, 04 Dec 2025 21:27:18 GMT"},"fingerprint":{"sha1":"0E:47:27:5E:B6:A0:47:8D:76:F9:8E:2A:EF:F8:CE:01:38:03:6C:10","sha256":"BF:FE:F9:FA:0F:66:56:7C:19:CE:A2:B9:D1:14:1A:A0:DA:AA:14:90:69:80:4D:95:58:F4:CA:F7:7E:49:AD:8F"}}},"request":{"raw":"GET /img/basic/name.png HTTP/1.1\r\nHost: arxide.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arxide.com/css/basic.css\r\nCookie: PHPSESSID=b4223c264384a9de58f5aa5fc3c0fbaa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 17 Oct 2025 06:07:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 1638\r\nlast-modified: Mon, 19 Jul 2021 11:54:04 GMT\r\nexpires: Mon, 27 Oct 2025 06:07:58 GMT\r\ncache-control: max-age=864000, private\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1638,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 316 x 44, 8-bit colormap, non-interlaced","md5":"18ca31ad8004e99acaa289e3682db083","sha1":"2c5d6e26580bc076bcffa8b38a263c9490450ffb","sha256":"c2f7fb09904961100f8ca8763a01e2748fa31fe19defee0e0ed50919517d0f91","sha512":"b5cc92b813ad96732504d88646947f78309541fa6d10446bdee8ffcc0377300a6d67e0c74090b8df33f0f2e300c2dedb4ac1ac6dbc77c941cc94a95f6634fc61","ssdeep":"","tlshash":"f331b71751bbefefc5dadd12229059604d117564235e2bcdc441d01b6837053aa6ac1c","first_seen":"2025-10-17T02:54:38.918225Z","last_seen":"2025-10-17T06:08:21.566564Z","times_seen":2,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"arxide.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arxide.com/img/basic/userax.png","fqdn":"arxide.com","domain":"arxide.com","tld":"com"},"ip":{"addr":"84.38.181.8","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arxide.com/check-steam","date":"2025-10-17T06:07:58.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"arxide.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 21:27:19 GMT","end":"Thu, 04 Dec 2025 21:27:18 GMT"},"fingerprint":{"sha1":"0E:47:27:5E:B6:A0:47:8D:76:F9:8E:2A:EF:F8:CE:01:38:03:6C:10","sha256":"BF:FE:F9:FA:0F:66:56:7C:19:CE:A2:B9:D1:14:1A:A0:DA:AA:14:90:69:80:4D:95:58:F4:CA:F7:7E:49:AD:8F"}}},"request":{"raw":"GET /img/basic/userax.png HTTP/1.1\r\nHost: arxide.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arxide.com/css/basic.css\r\nCookie: PHPSESSID=b4223c264384a9de58f5aa5fc3c0fbaa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 17 Oct 2025 06:07:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 312\r\nlast-modified: Sat, 06 Nov 2021 12:15:07 GMT\r\nexpires: Mon, 27 Oct 2025 06:07:58 GMT\r\ncache-control: max-age=864000, private\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":312,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced","md5":"8813b686f98178f7230df518fd958018","sha1":"4f5ba1b5ae4486862de3a78fe2f6b0dd016f94f7","sha256":"0bb472fb89fc49382250bc4b903cf64c363742a2be54d31cd44caf9a18749c51","sha512":"0bf1069573d5f82807826640bf75ec165200af95e6ee08e08e15674734df10be25bce36f3fbd1973f554ab1a8bcb4f6fb68a7f3f604bbff423e3b6186c97bcd5","ssdeep":"","tlshash":"fae07dfff927d46c4e85c97ad5a10586db5ecc56011248d0c1a393a326a34aa4255423","first_seen":"2025-10-17T02:54:38.915224Z","last_seen":"2025-10-17T06:08:21.571392Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"arxide.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arxide.com/img/fv/favicon.svg","fqdn":"arxide.com","domain":"arxide.com","tld":"com"},"ip":{"addr":"84.38.181.8","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arxide.com/check-steam","date":"2025-10-17T06:07:58.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"arxide.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 21:27:19 GMT","end":"Thu, 04 Dec 2025 21:27:18 GMT"},"fingerprint":{"sha1":"0E:47:27:5E:B6:A0:47:8D:76:F9:8E:2A:EF:F8:CE:01:38:03:6C:10","sha256":"BF:FE:F9:FA:0F:66:56:7C:19:CE:A2:B9:D1:14:1A:A0:DA:AA:14:90:69:80:4D:95:58:F4:CA:F7:7E:49:AD:8F"}}},"request":{"raw":"GET /img/fv/favicon.svg HTTP/1.1\r\nHost: arxide.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arxide.com/check-steam\r\nCookie: PHPSESSID=b4223c264384a9de58f5aa5fc3c0fbaa; _ga_122JGDFY13=GS2.1.s1760681278$o1$g0$t1760681278$j60$l0$h0; _ga=GA1.1.561414859.1760681279\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 17 Oct 2025 06:07:58 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 19 Aug 2021 06:24:40 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\nexpires: Mon, 27 Oct 2025 06:07:59 GMT\r\ncache-control: max-age=864000, private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4220,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fe4bfe797310dffe6aea53864d6cccd0","sha1":"bef9b77d0495ab81a2f331c4720b4d8807dce38f","sha256":"686dc5fd97ba25b0571740cc9f75731fe2b5a9004bd82607efc62813664766c1","sha512":"c97ed4c0ddd36ea46943a65fab11ad06e4b8ac7914a19cb751c2c4b0314836b7dae1f06c4ee967b749305fb762ef058e8040ceee38e3758a029ff303e6144870","ssdeep":"96:T5kLfU3dsQG0tZuoDXygygyshsUSUhTLUeUgUWUiyGu:TiLfUNNGyx8","tlshash":"0b91ff5c99e5907ad7c902818d2a1fd14b59f23f0ee83836c55d36a80e0ff2ad39fa04","first_seen":"2025-10-17T02:54:38.902091Z","last_seen":"2025-10-17T06:08:21.578946Z","times_seen":2,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"arxide.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}