{"report_id":"92d15691-c445-4920-a869-c84241764481","version":0,"status":"done","tags":[],"date":"2026-07-21T00:24:55Z","url":{"schema":"http","addr":"dev.www.gpma.non-steam.com","fqdn":"dev.www.gpma.non-steam.com","domain":"non-steam.com","tld":"com"},"ip":{"addr":"81.91.178.184","port":0,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"non-steam.com/","fqdn":"non-steam.com","domain":"non-steam.com","tld":"com"},"title":"Non-steam client panel","dom":{"size":4639,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c8607c873c6f20324cb16cddfff2cc66","sha1":"d8ca8dbba2f124665a84b3b36eead1b8411f0d10","sha256":"04158fe96d804bd55de8197b46ff44c57bee0494df479ad68705e217f2bbf025","sha512":"4103e9f87911cadad488d932ec9b301d64be0a1831fad7b535d48b17ff6ba9a5599e260b5d3fbe2aa15dd53a06dceb3c572a692e16b2411363939b57e804a9e2","ssdeep":"48:OdQv19ZY6u2IjTwALLF9DLlsY9kh6WfneBOITwu6HiXv6UJtEMYEKcQpQ:OI19ZDu2y0ALLPDLlsPXfnegMAVcuQ","tlshash":"e9a120924cf56867024280ca717aae0aad91da17fa5b594833fd57cd0fe7d42c807a2d","dom_hash":"domhashf07407e9398fc49daaa969be5aaa751c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dev.www.gpma.non-steam.com","fqdn":"dev.www.gpma.non-steam.com","domain":"non-steam.com","tld":"com"},"ip":{"addr":"81.91.178.184","port":0,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-25T00:24:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"non-steam.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"dev.www.gpma.non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"dev.www.gpma.non-steam.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"dev.www.gpma.non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"dev.www.gpma.non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"non-steam.com","ip":{"addr":"81.91.178.184","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-08-23","domain_rank":1608609,"first_seen":"2026-04-29T03:47:10.059749Z","last_seen":"2026-07-21T00:13:02.896456Z","alert_count":40,"request_count":10,"received_data":853353,"sent_data":6143,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"dev.www.gpma.non-steam.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-08-23","domain_rank":0,"first_seen":"2026-07-21T00:24:56.015332Z","last_seen":"2026-07-21T00:24:56.015332Z","alert_count":8,"request_count":2,"received_data":619,"sent_data":906,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"non-steam.com/build/runtime.c2980329.js","fqdn":"non-steam.com","domain":"non-steam.com","tld":"com"},"ip":{"addr":"81.91.178.184","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"60aeb948706b140fe7e3d5ef5a876260","sha1":"620a1c5147f26db32f0d4c19a95d216a6371ea43","sha256":"5fca017eb9c96e7b8382dfcf5f8edf9a20500f32a948d9fc1f48efc37d297ec0","sha512":"930af573c8fa3e2baaee149d0eda5ce2effafb35991c31c93a65a9469bb761c33704b4664bc8a43ed9e31efbb2afa2ac43311cced4ad4f5d844d6fa6400b2996","ssdeep":"","tlshash":"e121549531e4f8e427e6d8c5091f8047e612d973517ee8f1e32bcca13828a920177eb7","size":1428,"data":"","first_seen":"2025-08-03T17:04:22.993277Z","last_seen":"2026-07-21T05:46:28.680463Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"non-steam.com/build/755.43aadddf.js","fqdn":"non-steam.com","domain":"non-steam.com","tld":"com"},"ip":{"addr":"81.91.178.184","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"08e7640bcab8fd1ece626495ee61d7ae","sha1":"d519a7e330a932d9cd50a240c36328041b63858a","sha256":"46b47041f30a3156db035a62b017876285afbeebd59d735e033b58291e9be0c9","sha512":"871fb6fc2b35078fd1880accbacd90ea05a3a9e797c87527682e3a4644708ee8c92ec5e8694e58014d36f1db9eeca3cba32e6469563a74b009ebbdae12536272","ssdeep":"1536:lfRLi9gxGUs+4Ezy4bx60BW1kkWyAuxPb8vJ5pDVGf9oOcENMnEBt0AIH6ia/YIX:lfStPAvJ5TlllAYlYgP+","tlshash":"70930addb2cab06347a770ba40bf550bf2361999684d4400f125e4e9bc78b4a927bf3d","size":90006,"data":"","first_seen":"2023-03-11T22:22:29Z","last_seen":"2026-07-21T05:46:28.683471Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"non-steam.com/build/809.dd650ea1.js","fqdn":"non-steam.com","domain":"non-steam.com","tld":"com"},"ip":{"addr":"81.91.178.184","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b188f053f6825bbae4903ab45c6dbf3","sha1":"bfc0b0fe939628aac186f9a689999d9a852fee01","sha256":"e522a006bfeb6aec5452806c317393a1e0677587d756c9758370e7de0b8e741f","sha512":"9a0fa946ad66a575c589e187470ad6a9c33d726896fdeb4b9ad7c0004ac1ab9d3bc4c9cff901977bb16afa9abec535fdc96d617db344e9769d88996fa5ebfd3e","ssdeep":"3072:YhgN1QneuB1DGusRwxKTHDAtz1MPaH+8uQS04EJOu5LCT0Ef5IrGt+6ad7Nw/Sov:ckOdyP1eOeuwI5IrGtNaQS0R","tlshash":"da94054db2417532429ba1a6107b1a0fb2376a2da106809cb57ccdde5ebcd48327bf7d","size":414540,"data":"","first_seen":"2025-08-03T17:04:22.997062Z","last_seen":"2026-07-21T05:46:28.685169Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"non-steam.com/build/js/app.e801413a.js","fqdn":"non-steam.com","domain":"non-steam.com","tld":"com"},"ip":{"addr":"81.91.178.184","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b9106d07f3776e0c496cce68f87a87","sha1":"9662b57e1df9b6ff9a879bcd93ba394d8b58edef","sha256":"1b4cd7047eb43893972b9a58067d4ea4eeb5824706adb7e6486b7ab836da1cfe","sha512":"3ba0093c800ddc561c5972a3da75720b5dc9156eb163008c241258b7bfb83b0a29586e6ae2f2162228e59cf1a3f46548eb1f91748fc40410f9f6175efa45bcd0","ssdeep":"192:bHvlG5WePiUcaB/SIcWvV2WMfQBUXS68z4zx4WdckDBWlHOgm/VW:Lo5WePi4B/SC92WMIyXS68z4t4WdxWVT","tlshash":"9d32f8d87515306066af2096a02f25177826f57e981f5420a15a58f93decfcea133f3f","size":11818,"data":"","first_seen":"2025-08-03T17:04:22.999933Z","last_seen":"2026-07-21T05:46:28.686648Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"non-steam.com/","fqdn":"non-steam.com","domain":"non-steam.com","tld":"com"},"ip":{"addr":"81.91.178.184","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-21T00:24:28.466Z","timestamp":1784593468466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.notexistsde.non-steam.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 21:30:49 GMT","end":"Fri, 09 Oct 2026 21:30:48 GMT"},"fingerprint":{"sha1":"24:74:4C:FF:0E:F9:D2:5D:B7:12:69:01:65:85:5A:09:83:3C:44:EC","sha256":"73:D4:20:95:DB:68:C6:C8:E3:01:DD:02:24:2E:FD:57:04:0D:5B:69:6A:F9:74:F8:7E:33:85:07:70:6E:32:83"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: non-steam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=LxK6M1paIzI41ADw; __ddg10_=1784593468; __ddg9_=195.64.118.152; __ddg1_=AqPUSN0TPgcQmJbHO1H3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qxtMnWQy5WNTwHC5; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\n__ddg10_=1784593468; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\n__ddg9_=195.64.118.152; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\nPHPSESSID=ovana0b6mq0qg7k6e0hkr3kqc7; path=/; secure; HttpOnly; SameSite=lax\nRememberMe=deleted; expires=Mon, 21-Jul-2025 00:24:27 GMT; Max-Age=0; path=/; httponly\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private, max-age=0, must-revalidate, private\r\ndate: Tue, 21 Jul 2026 00:24:28 GMT, Tue, 21 Jul 2026 00:24:28 GMT\r\nexpires: Tue, 21 Jul 2026 00:24:28 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4678,"size_decoded":2587,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"74c43179a67f7df63f5ccb7204bf726b","sha1":"a40654e6e931b669b088367fd1c666b143fa8f3f","sha256":"3cea98e26ee5cfd34810729f07bc523b8bac24090b6f80c8d0a04ec48e02ccd2","sha512":"26a4e951a9e426569c3a310dd84aff30ccf1d7014222a39b8897782ba58ed21ed36c9484c086edb2ed336cba15903ab0ac130652ff9104d724aa830a9adc09af","ssdeep":"48:YaQv1vZY6u2IjTwALLF9DLlsY9kh6OufneBOITwu6HiXv6UJtEMYEKcQpu:YX1vZDu2y0ALLPDLlsPFufnegMAVcuu","tlshash":"dba121514cf56467024280ca717aae0aadd1ca17fa4b594433fd57cd0fe7d42c807a2d","first_seen":"2026-07-21T00:24:57.207374Z","last_seen":"2026-07-21T00:24:57.207374Z","times_seen":1,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":48,"connect":18,"send":0,"wait":102,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"non-steam.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"non-steam.com/img/favicon.ico","fqdn":"non-steam.com","domain":"non-steam.com","tld":"com"},"ip":{"addr":"81.91.178.184","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://non-steam.com/","date":"2026-07-21T00:24:29.757Z","timestamp":1784593469757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.notexistsde.non-steam.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 21:30:49 GMT","end":"Fri, 09 Oct 2026 21:30:48 GMT"},"fingerprint":{"sha1":"24:74:4C:FF:0E:F9:D2:5D:B7:12:69:01:65:85:5A:09:83:3C:44:EC","sha256":"73:D4:20:95:DB:68:C6:C8:E3:01:DD:02:24:2E:FD:57:04:0D:5B:69:6A:F9:74:F8:7E:33:85:07:70:6E:32:83"}}},"request":{"raw":"GET /img/favicon.ico HTTP/1.1\r\nHost: non-steam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://non-steam.com/\r\nCookie: __ddg8_=wMATbDIuC5sXLlOW; __ddg10_=1784593468; __ddg9_=195.64.118.152; __ddg1_=AqPUSN0TPgcQmJbHO1H3; PHPSESSID=ovana0b6mq0qg7k6e0hkr3kqc7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=83KVby8E8WHuX916; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:29 GMT\n__ddg10_=1784593469; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:29 GMT\n__ddg9_=195.64.118.152; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:29 GMT\r\ndate: Tue, 21 Jul 2026 00:24:29 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 38554\r\nlast-modified: Tue, 14 Jan 2020 12:41:13 GMT\r\netag: \"5e1db6e9-969a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":38554,"size_decoded":39079,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"231913fdebabcbe65f4b0052372bde56","sha1":"553909d080e4f210b64dc73292f3a111d5a0781f","sha256":"9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad","sha512":"7b11b709968c5a52b9b60189fb534f5df56912417243820e9d1c00c97f4bd6d0835f2cdf574d0c36ecb32dbbf5fc397324df54f7fdf9e1b062b5dbda2c02e919","ssdeep":"768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh","tlshash":"70038de82e4917aee9e2cf324adb6716237b4f88c0bc169742b07f193175a51c6d78c1","first_seen":"2023-04-05T07:02:49Z","last_seen":"2026-07-21T06:19:32.041312Z","times_seen":6804,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"non-steam.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"non-steam.com/sound/icq.mp3","fqdn":"non-steam.com","domain":"non-steam.com","tld":"com"},"ip":{"addr":"81.91.178.184","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://non-steam.com/","date":"2026-07-21T00:24:29.763Z","timestamp":1784593469763,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.notexistsde.non-steam.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 21:30:49 GMT","end":"Fri, 09 Oct 2026 21:30:48 GMT"},"fingerprint":{"sha1":"24:74:4C:FF:0E:F9:D2:5D:B7:12:69:01:65:85:5A:09:83:3C:44:EC","sha256":"73:D4:20:95:DB:68:C6:C8:E3:01:DD:02:24:2E:FD:57:04:0D:5B:69:6A:F9:74:F8:7E:33:85:07:70:6E:32:83"}}},"request":{"raw":"GET /sound/icq.mp3 HTTP/1.1\r\nHost: non-steam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://non-steam.com/\r\nCookie: __ddg8_=wMATbDIuC5sXLlOW; __ddg10_=1784593468; __ddg9_=195.64.118.152; __ddg1_=AqPUSN0TPgcQmJbHO1H3; PHPSESSID=ovana0b6mq0qg7k6e0hkr3kqc7\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=GTzVd4ZSXiqsR0yU; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:29 GMT\n__ddg10_=1784593469; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:29 GMT\n__ddg9_=195.64.118.152; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:29 GMT\r\ndate: Tue, 21 Jul 2026 00:24:29 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 8768\r\nlast-modified: Tue, 14 Jan 2020 12:41:13 GMT\r\netag: \"5e1db6e9-2240\"\r\ncontent-range: bytes 0-8767/8768\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":8768,"size_decoded":9302,"mime_type":"audio/mpeg","magic":"data","md5":"fd7eb21974e89390513d726a137ff482","sha1":"5fd62766c4be5de1665e7743954eaa43489b59bb","sha256":"a938983c2ec2f74f85eff6a3a03d5144d90cd52bb1fa7a11d0c8a565de5b4aea","sha512":"f50d0e58acb876efba3c3fefc6f041730f00aa354dcb03bc8230cb4a0af5c1384d03137e369a82cadf701d6466138631ea6323d67ed50b4ae068c2f25da559a1","ssdeep":"192:N0c2ePiiMuk2/hZKDhMtJGL0sco/egePC42EdT0ld5frtnij:NBiiMnQ4uAL0sCkEdMHN2","tlshash":"a2029ef64cc14067d2e70f7798127424eda4bad2e57520e03e6e45ed63d7700c8d5072","first_seen":"2025-08-03T17:04:22.982826Z","last_seen":"2026-07-21T05:46:28.673909Z","times_seen":88,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"non-steam.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"non-steam.com/sound/newFriend.mp3","fqdn":"non-steam.com","domain":"non-steam.com","tld":"com"},"ip":{"addr":"81.91.178.184","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://non-steam.com/","date":"2026-07-21T00:24:29.765Z","timestamp":1784593469765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.notexistsde.non-steam.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 21:30:49 GMT","end":"Fri, 09 Oct 2026 21:30:48 GMT"},"fingerprint":{"sha1":"24:74:4C:FF:0E:F9:D2:5D:B7:12:69:01:65:85:5A:09:83:3C:44:EC","sha256":"73:D4:20:95:DB:68:C6:C8:E3:01:DD:02:24:2E:FD:57:04:0D:5B:69:6A:F9:74:F8:7E:33:85:07:70:6E:32:83"}}},"request":{"raw":"GET /sound/newFriend.mp3 HTTP/1.1\r\nHost: non-steam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://non-steam.com/\r\nCookie: __ddg8_=wMATbDIuC5sXLlOW; __ddg10_=1784593468; __ddg9_=195.64.118.152; __ddg1_=AqPUSN0TPgcQmJbHO1H3; PHPSESSID=ovana0b6mq0qg7k6e0hkr3kqc7\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=C5R9WqnHnJUgEyUl; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:29 GMT\n__ddg10_=1784593469; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:29 GMT\n__ddg9_=195.64.118.152; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:29 GMT\r\ndate: Tue, 21 Jul 2026 00:24:29 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 32934\r\nlast-modified: Tue, 14 Jan 2020 12:41:13 GMT\r\netag: \"5e1db6e9-80a6\"\r\ncontent-range: bytes 0-32933/32934\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":32934,"size_decoded":33471,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"fe059ea5a5153c603f577c0f077286c0","sha1":"89e9f66e4cf91579219cf9dab792eb75042e457f","sha256":"733d4729fdcd28a227b6b254e08186c7c42bb0e609ae01d36521b6ee66071647","sha512":"023002124e9c3c6e680e68e060d697db54167fb1c1439426bf2806482c813179a3e4f2995a4cca4bcdf6b7793ea06ed8ac2848ec772933107e904f15ccb004d0","ssdeep":"384:XBIgZLEEX9nNxSDPV9o4SOlXkNS5MOEGOP3dI3tNwPr/6FeTptt9NJo820:XB3ZjB7S/oUVkM/sPtmwPLLTZ9Hoj0","tlshash":"b3e2c0496be55164f98f2e7e204ff035e9c5acac1c05cfc8ac045f601a7f592be39a26","first_seen":"2025-08-03T17:04:22.986003Z","last_seen":"2026-07-21T05:46:28.681711Z","times_seen":88,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"non-steam.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dev.www.gpma.non-steam.com/","fqdn":"dev.www.gpma.non-steam.com","domain":"non-steam.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-21T00:24:25.595Z","timestamp":1784593465595,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: dev.www.gpma.non-steam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T17:24:28.523367Z","times_seen":17427003,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"dev.www.gpma.non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"dev.www.gpma.non-steam.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"dev.www.gpma.non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"dev.www.gpma.non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"dev.www.gpma.non-steam.com/","fqdn":"dev.www.gpma.non-steam.com","domain":"non-steam.com","tld":"com"},"ip":{"addr":"81.91.178.184","port":80,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-21T00:24:28.337Z","timestamp":1784593468337,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: dev.www.gpma.non-steam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: ddos-guard\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nSet-Cookie: __ddg8_=LxK6M1paIzI41ADw; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\n__ddg10_=1784593468; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\n__ddg9_=195.64.118.152; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\n__ddg1_=AqPUSN0TPgcQmJbHO1H3; Domain=.non-steam.com; HttpOnly; Path=/; Expires=Wed, 21-Jul-2027 00:24:28 GMT\r\nDate: Tue, 21 Jul 2026 00:24:28 GMT\r\nContent-Type: text/html\r\nContent-Length: 185\r\nLocation: https://non-steam.com/\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T17:24:28.523367Z","times_seen":17427003,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":3,"connect":19,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"dev.www.gpma.non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"dev.www.gpma.non-steam.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"dev.www.gpma.non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"dev.www.gpma.non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"non-steam.com/build/235.c3078fc7.css","fqdn":"non-steam.com","domain":"non-steam.com","tld":"com"},"ip":{"addr":"81.91.178.184","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://non-steam.com/","date":"2026-07-21T00:24:28.913Z","timestamp":1784593468913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.notexistsde.non-steam.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 21:30:49 GMT","end":"Fri, 09 Oct 2026 21:30:48 GMT"},"fingerprint":{"sha1":"24:74:4C:FF:0E:F9:D2:5D:B7:12:69:01:65:85:5A:09:83:3C:44:EC","sha256":"73:D4:20:95:DB:68:C6:C8:E3:01:DD:02:24:2E:FD:57:04:0D:5B:69:6A:F9:74:F8:7E:33:85:07:70:6E:32:83"}}},"request":{"raw":"GET /build/235.c3078fc7.css HTTP/1.1\r\nHost: non-steam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://non-steam.com/\r\nCookie: __ddg8_=qxtMnWQy5WNTwHC5; __ddg10_=1784593468; __ddg9_=195.64.118.152; __ddg1_=AqPUSN0TPgcQmJbHO1H3; PHPSESSID=ovana0b6mq0qg7k6e0hkr3kqc7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=w8h9G4Wg2QqmDTJs; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\n__ddg10_=1784593468; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\n__ddg9_=195.64.118.152; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\r\ndate: Tue, 21 Jul 2026 00:24:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 34722\r\nlast-modified: Thu, 17 Feb 2022 19:41:39 GMT\r\netag: \"620ea4f3-87a2\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":34722,"size_decoded":35243,"mime_type":"text/css","magic":"ASCII text, with very long lines (15427)","md5":"9eec6156d933d2944499cd6fc68311e1","sha1":"36a00bb3651e80da426551a5185121943515d48a","sha256":"5c2e87b849647f3ad0b9d73e8ba458ccd32c75cd877e2de0f364c05ba61734b3","sha512":"98b5d8be8938f1e95b7d514fcb1acfd893ebef5b8dbeb999f4c32025f5af533841a31638b4ced533bef1e7320950bfd33b0ffbaf0a3b88402b0f7c3eaa68ae2d","ssdeep":"384:pCwiEt7Cksa5cvR3u1e73CwiEtgUJwamiHWu4G6IzvgSc7nfZBhVLV:slEt+NJslEtgUJHmnu4G6IzvgBhL","tlshash":"38f27530a583242efe33c13460e15ef4522bc146eda64fbca05af65a53e68e8d47b971","first_seen":"2025-08-03T17:04:22.990353Z","last_seen":"2026-07-21T05:46:28.68258Z","times_seen":88,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"non-steam.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"non-steam.com/build/css/app.69de329a.css","fqdn":"non-steam.com","domain":"non-steam.com","tld":"com"},"ip":{"addr":"81.91.178.184","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://non-steam.com/","date":"2026-07-21T00:24:28.915Z","timestamp":1784593468915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.notexistsde.non-steam.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 21:30:49 GMT","end":"Fri, 09 Oct 2026 21:30:48 GMT"},"fingerprint":{"sha1":"24:74:4C:FF:0E:F9:D2:5D:B7:12:69:01:65:85:5A:09:83:3C:44:EC","sha256":"73:D4:20:95:DB:68:C6:C8:E3:01:DD:02:24:2E:FD:57:04:0D:5B:69:6A:F9:74:F8:7E:33:85:07:70:6E:32:83"}}},"request":{"raw":"GET /build/css/app.69de329a.css HTTP/1.1\r\nHost: non-steam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://non-steam.com/\r\nCookie: __ddg8_=qxtMnWQy5WNTwHC5; __ddg10_=1784593468; __ddg9_=195.64.118.152; __ddg1_=AqPUSN0TPgcQmJbHO1H3; PHPSESSID=ovana0b6mq0qg7k6e0hkr3kqc7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=wMATbDIuC5sXLlOW; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\n__ddg10_=1784593468; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\n__ddg9_=195.64.118.152; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\r\ndate: Tue, 21 Jul 2026 00:24:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 210337\r\nlast-modified: Thu, 17 Feb 2022 19:41:39 GMT\r\netag: \"620ea4f3-335a1\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":210337,"size_decoded":210860,"mime_type":"text/css","magic":"ASCII text, with very long lines (65308)","md5":"7205b806bc43a3ccc45aba3575a57b93","sha1":"3bacb05ba254bb3eb63005ec71879f8c38bcfc54","sha256":"2908bc8966d29be2e198fa69863259762eafb08a49be590533a20fe81ed71ead","sha512":"8892bf55ebb61d3dfe2339d99ffbbb2c898b021f2068ea7df693fff1e5d236be4f71a72f73313b824f6dd63c88dc912a03b8e39a06bacf7101642ef607cbced0","ssdeep":"3072:ND7aUmq3SYiLENM6HN26E5+pCkiBwQiy5:ND7Bmq3SYiLENM6HN263CkiBcy5","tlshash":"a824a5a9f58420f8e37bc91f95e0b6b9153fe655d2110f9af01bab188bc52c605a3f0d","first_seen":"2025-08-03T17:04:22.979656Z","last_seen":"2026-07-21T05:46:28.67916Z","times_seen":88,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":319,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"non-steam.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"non-steam.com/build/runtime.c2980329.js","fqdn":"non-steam.com","domain":"non-steam.com","tld":"com"},"ip":{"addr":"81.91.178.184","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://non-steam.com/","date":"2026-07-21T00:24:28.917Z","timestamp":1784593468917,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.notexistsde.non-steam.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 21:30:49 GMT","end":"Fri, 09 Oct 2026 21:30:48 GMT"},"fingerprint":{"sha1":"24:74:4C:FF:0E:F9:D2:5D:B7:12:69:01:65:85:5A:09:83:3C:44:EC","sha256":"73:D4:20:95:DB:68:C6:C8:E3:01:DD:02:24:2E:FD:57:04:0D:5B:69:6A:F9:74:F8:7E:33:85:07:70:6E:32:83"}}},"request":{"raw":"GET /build/runtime.c2980329.js HTTP/1.1\r\nHost: non-steam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://non-steam.com/\r\nCookie: __ddg8_=qxtMnWQy5WNTwHC5; __ddg10_=1784593468; __ddg9_=195.64.118.152; __ddg1_=AqPUSN0TPgcQmJbHO1H3; PHPSESSID=ovana0b6mq0qg7k6e0hkr3kqc7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zVkPhlcub88wwlf5; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\n__ddg10_=1784593468; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\n__ddg9_=195.64.118.152; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\r\ndate: Tue, 21 Jul 2026 00:24:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1428\r\nlast-modified: Thu, 17 Feb 2022 19:41:39 GMT\r\netag: \"620ea4f3-594\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1428,"size_decoded":1961,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1428), with no line terminators","md5":"60aeb948706b140fe7e3d5ef5a876260","sha1":"620a1c5147f26db32f0d4c19a95d216a6371ea43","sha256":"5fca017eb9c96e7b8382dfcf5f8edf9a20500f32a948d9fc1f48efc37d297ec0","sha512":"930af573c8fa3e2baaee149d0eda5ce2effafb35991c31c93a65a9469bb761c33704b4664bc8a43ed9e31efbb2afa2ac43311cced4ad4f5d844d6fa6400b2996","ssdeep":"","tlshash":"e121549531e4f8e427e6d8c5091f8047e612d973517ee8f1e32bcca13828a920177eb7","first_seen":"2025-08-03T17:04:22.993277Z","last_seen":"2026-07-21T05:46:28.680463Z","times_seen":88,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"non-steam.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"non-steam.com/build/755.43aadddf.js","fqdn":"non-steam.com","domain":"non-steam.com","tld":"com"},"ip":{"addr":"81.91.178.184","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://non-steam.com/","date":"2026-07-21T00:24:28.918Z","timestamp":1784593468918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.notexistsde.non-steam.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 21:30:49 GMT","end":"Fri, 09 Oct 2026 21:30:48 GMT"},"fingerprint":{"sha1":"24:74:4C:FF:0E:F9:D2:5D:B7:12:69:01:65:85:5A:09:83:3C:44:EC","sha256":"73:D4:20:95:DB:68:C6:C8:E3:01:DD:02:24:2E:FD:57:04:0D:5B:69:6A:F9:74:F8:7E:33:85:07:70:6E:32:83"}}},"request":{"raw":"GET /build/755.43aadddf.js HTTP/1.1\r\nHost: non-steam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://non-steam.com/\r\nCookie: __ddg8_=qxtMnWQy5WNTwHC5; __ddg10_=1784593468; __ddg9_=195.64.118.152; __ddg1_=AqPUSN0TPgcQmJbHO1H3; PHPSESSID=ovana0b6mq0qg7k6e0hkr3kqc7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=sXyvSRfcl2meaPzi; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\n__ddg10_=1784593468; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\n__ddg9_=195.64.118.152; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\r\ndate: Tue, 21 Jul 2026 00:24:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 90006\r\nlast-modified: Thu, 17 Feb 2022 19:41:39 GMT\r\netag: \"620ea4f3-15f96\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":90006,"size_decoded":90542,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65464)","md5":"08e7640bcab8fd1ece626495ee61d7ae","sha1":"d519a7e330a932d9cd50a240c36328041b63858a","sha256":"46b47041f30a3156db035a62b017876285afbeebd59d735e033b58291e9be0c9","sha512":"871fb6fc2b35078fd1880accbacd90ea05a3a9e797c87527682e3a4644708ee8c92ec5e8694e58014d36f1db9eeca3cba32e6469563a74b009ebbdae12536272","ssdeep":"1536:lfRLi9gxGUs+4Ezy4bx60BW1kkWyAuxPb8vJ5pDVGf9oOcENMnEBt0AIH6ia/YIX:lfStPAvJ5TlllAYlYgP+","tlshash":"70930addb2cab06347a770ba40bf550bf2361999684d4400f125e4e9bc78b4a927bf3d","first_seen":"2023-03-11T22:22:29Z","last_seen":"2026-07-21T05:46:28.683471Z","times_seen":109,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"non-steam.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"non-steam.com/build/809.dd650ea1.js","fqdn":"non-steam.com","domain":"non-steam.com","tld":"com"},"ip":{"addr":"81.91.178.184","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://non-steam.com/","date":"2026-07-21T00:24:28.920Z","timestamp":1784593468920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.notexistsde.non-steam.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 21:30:49 GMT","end":"Fri, 09 Oct 2026 21:30:48 GMT"},"fingerprint":{"sha1":"24:74:4C:FF:0E:F9:D2:5D:B7:12:69:01:65:85:5A:09:83:3C:44:EC","sha256":"73:D4:20:95:DB:68:C6:C8:E3:01:DD:02:24:2E:FD:57:04:0D:5B:69:6A:F9:74:F8:7E:33:85:07:70:6E:32:83"}}},"request":{"raw":"GET /build/809.dd650ea1.js HTTP/1.1\r\nHost: non-steam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://non-steam.com/\r\nCookie: __ddg8_=qxtMnWQy5WNTwHC5; __ddg10_=1784593468; __ddg9_=195.64.118.152; __ddg1_=AqPUSN0TPgcQmJbHO1H3; PHPSESSID=ovana0b6mq0qg7k6e0hkr3kqc7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=EkvZK69FF838ejgL; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\n__ddg10_=1784593468; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\n__ddg9_=195.64.118.152; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\r\ndate: Tue, 21 Jul 2026 00:24:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 414540\r\nlast-modified: Thu, 17 Feb 2022 19:41:39 GMT\r\netag: \"620ea4f3-6534c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":414540,"size_decoded":415077,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65466)","md5":"2b188f053f6825bbae4903ab45c6dbf3","sha1":"bfc0b0fe939628aac186f9a689999d9a852fee01","sha256":"e522a006bfeb6aec5452806c317393a1e0677587d756c9758370e7de0b8e741f","sha512":"9a0fa946ad66a575c589e187470ad6a9c33d726896fdeb4b9ad7c0004ac1ab9d3bc4c9cff901977bb16afa9abec535fdc96d617db344e9769d88996fa5ebfd3e","ssdeep":"3072:YhgN1QneuB1DGusRwxKTHDAtz1MPaH+8uQS04EJOu5LCT0Ef5IrGt+6ad7Nw/Sov:ckOdyP1eOeuwI5IrGtNaQS0R","tlshash":"da94054db2417532429ba1a6107b1a0fb2376a2da106809cb57ccdde5ebcd48327bf7d","first_seen":"2025-08-03T17:04:22.997062Z","last_seen":"2026-07-21T05:46:28.685169Z","times_seen":88,"resource_available":true,"data":null}},"time_used":732,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":627,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"non-steam.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"non-steam.com/build/js/app.e801413a.js","fqdn":"non-steam.com","domain":"non-steam.com","tld":"com"},"ip":{"addr":"81.91.178.184","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://non-steam.com/","date":"2026-07-21T00:24:28.922Z","timestamp":1784593468922,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.notexistsde.non-steam.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 21:30:49 GMT","end":"Fri, 09 Oct 2026 21:30:48 GMT"},"fingerprint":{"sha1":"24:74:4C:FF:0E:F9:D2:5D:B7:12:69:01:65:85:5A:09:83:3C:44:EC","sha256":"73:D4:20:95:DB:68:C6:C8:E3:01:DD:02:24:2E:FD:57:04:0D:5B:69:6A:F9:74:F8:7E:33:85:07:70:6E:32:83"}}},"request":{"raw":"GET /build/js/app.e801413a.js HTTP/1.1\r\nHost: non-steam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://non-steam.com/\r\nCookie: __ddg8_=qxtMnWQy5WNTwHC5; __ddg10_=1784593468; __ddg9_=195.64.118.152; __ddg1_=AqPUSN0TPgcQmJbHO1H3; PHPSESSID=ovana0b6mq0qg7k6e0hkr3kqc7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=aUqYA8uk4Gf1yYFt; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\n__ddg10_=1784593468; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\n__ddg9_=195.64.118.152; Domain=.non-steam.com; Path=/; Expires=Tue, 21-Jul-2026 00:44:28 GMT\r\ndate: Tue, 21 Jul 2026 00:24:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 11852\r\nlast-modified: Thu, 17 Feb 2022 19:41:39 GMT\r\netag: \"620ea4f3-2e4c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":11852,"size_decoded":12387,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11334), with no line terminators","md5":"70b9106d07f3776e0c496cce68f87a87","sha1":"9662b57e1df9b6ff9a879bcd93ba394d8b58edef","sha256":"1b4cd7047eb43893972b9a58067d4ea4eeb5824706adb7e6486b7ab836da1cfe","sha512":"3ba0093c800ddc561c5972a3da75720b5dc9156eb163008c241258b7bfb83b0a29586e6ae2f2162228e59cf1a3f46548eb1f91748fc40410f9f6175efa45bcd0","ssdeep":"192:bHvlG5WePiUcaB/SIcWvV2WMfQBUXS68z4zx4WdckDBWlHOgm/VW:Lo5WePi4B/SC92WMIyXS68z4t4WdxWVT","tlshash":"9d32f8d87515306066af2096a02f25177826f57e981f5420a15a58f93decfcea133f3f","first_seen":"2025-08-03T17:04:22.999933Z","last_seen":"2026-07-21T05:46:28.686648Z","times_seen":88,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"non-steam.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"non-steam.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}