{"report_id":"93219637-628d-4ca9-9e8b-e18638f3297b","version":6,"status":"done","tags":[],"date":"2026-03-18T19:07:13Z","url":{"schema":"https","addr":"support.valveverify.com/profiles/76561198268358375/en/wizard/HelpRequest/HT-PC88-JKNN-ZBB4","fqdn":"support.valveverify.com","domain":"valveverify.com","tld":"com"},"ip":{"addr":"104.21.84.217","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"support.valveverify.com/profiles/76561198268358375/en/wizard/HelpRequest/HT-PC88-JKNN-ZBB4","fqdn":"support.valveverify.com","domain":"valveverify.com","tld":"com"},"title":"ᅠ","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"support.valveverify.com/profiles/76561198268358375/en/wizard/HelpRequest/HT-PC88-JKNN-ZBB4","fqdn":"support.valveverify.com","domain":"valveverify.com","tld":"com"},"ip":{"addr":"104.21.84.217","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-22T19:07:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"support.valveverify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"support.valveverify.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":5,"request_count":5,"received_data":692683,"sent_data":2959,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.3.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"support.valveverify.com/profiles/76561198268358375/en/wizard/HelpRequest/HT-PC88-JKNN-ZBB4","fqdn":"support.valveverify.com","domain":"valveverify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-18T19:06:51.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"valveverify.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 17:53:01 GMT","end":"Fri, 29 May 2026 17:53:00 GMT"},"fingerprint":{"sha1":"FB:18:8D:09:E8:C4:14:A7:04:EF:AB:40:44:FA:1F:22:06:34:55:3D","sha256":"C1:CD:4E:DC:84:4A:47:E6:30:A6:6E:75:2D:A2:D6:EF:3D:A0:22:2C:E8:AC:B0:5A:CD:DE:32:C7:B4:D8:A6:7F"}}},"request":{"raw":"GET /profiles/76561198268358375/en/wizard/HelpRequest/HT-PC88-JKNN-ZBB4 HTTP/1.1\r\nHost: support.valveverify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 19:06:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.3.17\r\nset-cookie: PHPSESSID=f8bb900db72207c59b083de68f4a9197; path=/; HttpOnly; SameSite=Lax\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Cookie, Accept-Encoding, User-Agent\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: blob:; font-src 'self'; connect-src 'self' https:; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncache-control: no-cache, no-store, must-revalidate, private\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XBMzWNq6foSc7c19TUh8on2cQrFWfuxfuc1z1f5bOd5a1j4dTgc%2Bz7DuxII3m4O6V21QJCAn2tml4LaN6tNoCMqDm6WNs4hOMwCl2%2BOizcgYsDUrGyRY\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9de684556cdaf3c7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5783,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (431)","md5":"35040abbbedfa032f021b34d6f6dc773","sha1":"31c5381edd35d7e270938a5da07d0f43917d7056","sha256":"a9e246c1c9f6639d1ce5cbcf4bdf21772b282e8536cf7625813b5c4e809e2586","sha512":"cb50f404f16edd412b28f7034d909a2e76287eafca94e5bb1cebb83d0aa7b211def55c48218272925f9d789a1008852121bd5aff81ddee26fb406a1313652546","ssdeep":"96:wwvnN3OlCj6UPvKlBOwWcMpy7I+rEMFhrNRHd/l:whNBOwWcA+Nhr3d9","tlshash":"51c1a663aab05c2613111226be633559cf658607d8885c41f6ac044f3fc2fd8c67732f","first_seen":"2026-03-18T19:07:18.391742Z","last_seen":"2026-03-18T19:07:18.391742Z","times_seen":1,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":55,"dns":22,"connect":8,"send":0,"wait":155,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"support.valveverify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"support.valveverify.com/scripts/media/assets/styles.css?sign=05cf528bde5ad6bee4a21c46f48e23c3\u0026t=1773860811","fqdn":"support.valveverify.com","domain":"valveverify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://support.valveverify.com/profiles/76561198268358375/en/wizard/HelpRequest/HT-PC88-JKNN-ZBB4","date":"2026-03-18T19:06:51.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"valveverify.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 17:53:01 GMT","end":"Fri, 29 May 2026 17:53:00 GMT"},"fingerprint":{"sha1":"FB:18:8D:09:E8:C4:14:A7:04:EF:AB:40:44:FA:1F:22:06:34:55:3D","sha256":"C1:CD:4E:DC:84:4A:47:E6:30:A6:6E:75:2D:A2:D6:EF:3D:A0:22:2C:E8:AC:B0:5A:CD:DE:32:C7:B4:D8:A6:7F"}}},"request":{"raw":"GET /scripts/media/assets/styles.css?sign=05cf528bde5ad6bee4a21c46f48e23c3\u0026t=1773860811 HTTP/1.1\r\nHost: support.valveverify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.valveverify.com/profiles/76561198268358375/en/wizard/HelpRequest/HT-PC88-JKNN-ZBB4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=f8bb900db72207c59b083de68f4a9197\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 19:06:51 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncontent-length: 3259\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.3.17\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nsurrogate-control: no-store\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: blob:; font-src 'self'; connect-src 'self' https:; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\netag: \"0a5f6eb83dbbc10ff9620872ff2f7ac3\"\r\nlast-modified: Fri, 20 Feb 2026 23:33:14 GMT\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, private\r\npragma: no-cache\r\nexpires: 0\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UUCL%2BjqOgxxVY7dHxfCZHeE3y7j0EF%2FJYoFearSvxjQfpOu3dos0WTI8sVJSlXXE4Te5BeAW%2BZN8%2BviRReBLFZrQMu1Z8tzAv%2BmBZO0CMusVl54p2%2B68\"}]}\r\ncf-ray: 9de684578976f3c7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":12562,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (12561)","md5":"ff70512c9bda81cf703502061bd5ac2a","sha1":"05f27ac071899fbd8e19e1b126b3d75712bf201a","sha256":"66be29ae8b3a68cc4df81fb29f63968649a460639846b256fec3e2b30005aa89","sha512":"6af5696be3a4839eded9a4f1362be0420b08e14df9d2a7ba23c6bd2f68b242ac153f15adc4d351f54c28eb25f6b980df299c6c414c9f06543f79cfdcb3e424de","ssdeep":"384:OpgJklx/++7PYh3AmOkkOuIT7zddzTxOZgiLjp9CAX5RV7YUQCmH5ES6O4BRi:OpgJk77rpi","tlshash":"27425021356c613aa17bc6651be7f686d016ba234a13b129fec1622c5fdf0d73372d48","first_seen":"2026-02-14T15:19:38.146148Z","last_seen":"2026-03-18T23:23:04.05094Z","times_seen":8,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"support.valveverify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"support.valveverify.com/files/vendor/build/script.js?sign=e6190318cf15be68f16e4e0b38749f2e\u0026t=1773860811","fqdn":"support.valveverify.com","domain":"valveverify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://support.valveverify.com/profiles/76561198268358375/en/wizard/HelpRequest/HT-PC88-JKNN-ZBB4","date":"2026-03-18T19:06:51.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"valveverify.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 17:53:01 GMT","end":"Fri, 29 May 2026 17:53:00 GMT"},"fingerprint":{"sha1":"FB:18:8D:09:E8:C4:14:A7:04:EF:AB:40:44:FA:1F:22:06:34:55:3D","sha256":"C1:CD:4E:DC:84:4A:47:E6:30:A6:6E:75:2D:A2:D6:EF:3D:A0:22:2C:E8:AC:B0:5A:CD:DE:32:C7:B4:D8:A6:7F"}}},"request":{"raw":"GET /files/vendor/build/script.js?sign=e6190318cf15be68f16e4e0b38749f2e\u0026t=1773860811 HTTP/1.1\r\nHost: support.valveverify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.valveverify.com/profiles/76561198268358375/en/wizard/HelpRequest/HT-PC88-JKNN-ZBB4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=f8bb900db72207c59b083de68f4a9197\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 19:06:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 273795\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.3.17\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nsurrogate-control: no-store\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: blob:; font-src 'self'; connect-src 'self' https:; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\netag: \"46d1906c7cbd38c07369ee706622c41b\"\r\nlast-modified: Fri, 20 Feb 2026 23:33:14 GMT\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, private\r\npragma: no-cache\r\nexpires: 0\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kQcN0bmNCElPzc5z3jHpHpo34qxo4ayu4NUlji4EMXaXKaZq9HozhzUOEOg6LNm8QVvoJHwfrREo3jnAzYq6MB2PdeOIVRmvE82KDq6pb5TPa%2BFaSEfJ\"}]}\r\ncf-ray: 9de68457897df3c7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":630197,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (34604)","md5":"e5eb79f73133e6e83b2e436c7c988a2e","sha1":"a61d0af3fa6dc97c15afd5b1f9835ec21864a83c","sha256":"774fb55a46fb866ed01b5cdbe1a910666e128f42c049e4434b3a03207db14973","sha512":"2ea2594c6f2e0b755682b9e901a354d13134652818ab8892423326b3f56464a97c489b49336b9600da936494c27f3d0e491cec58b553cea3f73ec4fd81a13d98","ssdeep":"12288:OiDgKSLIcuPHscvMu9bdsr0j10ZZ9odceQJPf3qOJ100QHxkUP:Oi8KScmyZsroyL9odceyP//00QHW4","tlshash":"73d4189473d1bc50225f6ebc2b3f71c6fa6e6ea830c4588bd1885d457b72600e5a2e37","first_seen":"2026-02-28T22:15:58.452866Z","last_seen":"2026-03-18T23:23:04.051625Z","times_seen":4,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"support.valveverify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"support.valveverify.com/apple-touch-icon.png","fqdn":"support.valveverify.com","domain":"valveverify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://support.valveverify.com/profiles/76561198268358375/en/wizard/HelpRequest/HT-PC88-JKNN-ZBB4","date":"2026-03-18T19:06:52.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"valveverify.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 17:53:01 GMT","end":"Fri, 29 May 2026 17:53:00 GMT"},"fingerprint":{"sha1":"FB:18:8D:09:E8:C4:14:A7:04:EF:AB:40:44:FA:1F:22:06:34:55:3D","sha256":"C1:CD:4E:DC:84:4A:47:E6:30:A6:6E:75:2D:A2:D6:EF:3D:A0:22:2C:E8:AC:B0:5A:CD:DE:32:C7:B4:D8:A6:7F"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: support.valveverify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.valveverify.com/profiles/76561198268358375/en/wizard/HelpRequest/HT-PC88-JKNN-ZBB4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=f8bb900db72207c59b083de68f4a9197\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 19:06:52 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.3.17\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 185762\r\nlast-modified: Mon, 16 Mar 2026 15:30:50 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=snM7xKVp7GIE3uFnAcsOmAA7lc%2Fmyhu0zb3klWw8FnQQEoMR9gA2YqBxzFCLJHGEBLY4%2FGbxIknJ55nKImwBKSXJ1vi58zlPdAlWF4b6q5l3HRMaTNyX\"}]}\r\ncf-ray: 9de6845ddfc4f3c7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":73,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA,","md5":"d87cc38425581ca11f67877d942a9bd6","sha1":"15ca9c796dc063ed2e506865614bfd511edaeed7","sha256":"e43a1824fdbd4e5998ccda3f3e0600497aa48bfa86c065e913a87c53ea4b755c","sha512":"74f020058494c59a1ff529b4a87e6dfcf24a7b102ebf3a38b9e2a24f90884ab3d2450379afe9353fc7d4c8f3dbaf6620436d108477d5f624be64e17aacc5e00d","ssdeep":"","tlshash":"52a022f323a82cbccc028033800c0330cb30e20003200f0e002c823e8c0223200c8b83","first_seen":"2026-02-14T15:19:38.149494Z","last_seen":"2026-04-25T16:11:06.450352Z","times_seen":30,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"support.valveverify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"support.valveverify.com/favicon.ico","fqdn":"support.valveverify.com","domain":"valveverify.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://support.valveverify.com/profiles/76561198268358375/en/wizard/HelpRequest/HT-PC88-JKNN-ZBB4","date":"2026-03-18T19:06:52.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"valveverify.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 17:53:01 GMT","end":"Fri, 29 May 2026 17:53:00 GMT"},"fingerprint":{"sha1":"FB:18:8D:09:E8:C4:14:A7:04:EF:AB:40:44:FA:1F:22:06:34:55:3D","sha256":"C1:CD:4E:DC:84:4A:47:E6:30:A6:6E:75:2D:A2:D6:EF:3D:A0:22:2C:E8:AC:B0:5A:CD:DE:32:C7:B4:D8:A6:7F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: support.valveverify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://support.valveverify.com/profiles/76561198268358375/en/wizard/HelpRequest/HT-PC88-JKNN-ZBB4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=f8bb900db72207c59b083de68f4a9197\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 19:06:52 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Fri, 12 Jul 2024 06:21:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cF7gWsbSWGlZQgWaILlMiABsKEFJGDJrYySJtxXkQpLfKmNk9VrQXkP%2FJmWxWxf%2Bxdk4B1PpUlZVWd2yJqERItCagj9BCuMivkIq758wYgYiGFfrssWm\"}]}\r\nage: 2829\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6690cb50-969a\"\r\ncontent-encoding: br\r\ncf-ray: 9de6845ddfc7f3c7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38554,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"231913fdebabcbe65f4b0052372bde56","sha1":"553909d080e4f210b64dc73292f3a111d5a0781f","sha256":"9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad","sha512":"7b11b709968c5a52b9b60189fb534f5df56912417243820e9d1c00c97f4bd6d0835f2cdf574d0c36ecb32dbbf5fc397324df54f7fdf9e1b062b5dbda2c02e919","ssdeep":"768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh","tlshash":"70038de82e4917aee9e2cf324adb6716237b4f88c0bc169742b07f193175a51c6d78c1","first_seen":"2023-04-05T07:02:49Z","last_seen":"2026-07-25T15:49:50.736517Z","times_seen":6832,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"support.valveverify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}