{"report_id":"d0e1a4d6-e4db-43f1-9fd2-c709ab6d1980","version":0,"status":"done","tags":[],"date":"2026-06-28T10:05:07Z","url":{"schema":"http","addr":"help.valverestore.com/id/76561197960265754","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":0,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"final":{"url":{"schema":"https","addr":"help.valverestore.com/id/76561197960265754","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"title":"Steam Support","dom":{"size":34323,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (548)","md5":"b0f0311222d4c93af4add102d960a89f","sha1":"596a8c44dc21dea8cab2d1a2a944d434914fccda","sha256":"a0030a4c0ad5879987ad091123cd1b3a275033d75b7c95c610cff77ca7693ee1","sha512":"4e8485bc8547fdee32f634c911951705e0f5dbe3489f327ddc40b19d7ab435848c1b491dde7e0468589711cb0c515795803733ddc2ec908a3c700f7f20771ccf","ssdeep":"384:6P6+sdoEcfvDl1bPopYlEcfvuf3944BoUSc56oCyyEvfVIArFTV5epih:vxWs1WWftxBLb3","tlshash":"eff2442258f244b34256a5c4b6b99f27ffc1c607e29d56117efc0ad84fc6e42ce63528","dom_hash":"domhash064d397b64ec1aebba56a5345faa76bb","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"help.valverestore.com/id/76561197960265754","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":0,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T10:05:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"help.steampowered.com","ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2000-08-09","domain_rank":11249,"first_seen":"2015-06-02T22:49:13Z","last_seen":"2026-06-28T01:07:32.549895Z","alert_count":0,"request_count":9,"received_data":205373,"sent_data":5221,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"help.valverestore.com","ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"domain_registered":"2026-05-23","domain_rank":0,"first_seen":"2026-06-28T01:07:31.878867Z","last_seen":"2026-06-28T01:07:31.878867Z","alert_count":32,"request_count":32,"received_data":1608837,"sent_data":18294,"comment":"","tags":null,"fingerprints":[{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"avatars.akamai.steamstatic.com","ip":{"addr":"95.101.10.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-11-07","domain_rank":165466,"first_seen":"2022-02-09T22:59:21Z","last_seen":"2026-06-28T01:02:59.666717Z","alert_count":0,"request_count":1,"received_data":3829,"sent_data":601,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"waitingpanl.com","ip":{"addr":"45.144.53.193","port":443,"asn":0,"as":"","country":"Slovenia","country_code":"SI"},"domain_registered":"2026-04-13","domain_rank":0,"first_seen":"2026-05-08T03:01:45.67226Z","last_seen":"2026-06-28T01:07:32.630368Z","alert_count":0,"request_count":1,"received_data":412,"sent_data":572,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"help.valverestore.com/assets/js/shared_global.js","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f38a9abd0a1e72a70cee9e7db0224b26","sha1":"2e7ed93b4c02c4a181b1c46a5bebdb2cf01629c5","sha256":"a5e293cb4002448a8e91f84d71fba900f03ec25e92b907dfba1446934f306a08","sha512":"8a62f764230377ff22e77dba4b9b5488ce17146a928a7e71359ee9a7fa5219c700e1c2d399426dadb807cdc3844fb3ffa71d87f06f4c7062cefa39e98366c65d","ssdeep":"1536:ivZkXRW6Q2hNJRNhUmciMQzoscmDecTV8iqD3YHI1Sp6D3QgQHrMTAQaOLXkwRiI:Z/5UmciZos1DecSP7YHVgOUXKJq","tlshash":"73e329d5eb7c212a897a302ddd4f504a3a7e1832b00468697c5e94dc6ae0d7e43b7e7c","size":154347,"data":"","first_seen":"2025-12-17T07:06:50.786611Z","last_seen":"2026-06-28T10:05:13.809422Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/id/76561197960265754","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa201d11a3b8bd664bf2505651cea4b7","sha1":"7bf6cb1c04f4e1722e2732a50f8fb073f4575e91","sha256":"4a711cd815f662f7191c3e94d32dd68eedb23d6c28e1a52edd8e2ba598e40733","sha512":"3f95c8b18c12f635bcb66138ba4a99e15c45b196eeffcd189d2fbc8c10bad3c4a5d464b234b701017cbcf220285dd0e12c776e18c7e3ff4762f2905b49ee0e9d","ssdeep":"","tlshash":"d0c09b08b472fe90479315a08459431df1141517d429fd50b97cccd08f11015118054e","size":147,"data":"","first_seen":"2026-06-28T10:05:13.837934Z","last_seen":"2026-06-28T10:05:13.837934Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/id/76561197960265754","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ed6fe4b6a4d8cfd17871d91d3a837f6","sha1":"a6d5553eb937cb129e4042a52d316e683d15a2b7","sha256":"544baa1691b99c9af31a94a33325971f6f91973af6aa95aff558b1757cf20cb1","sha512":"6b92365800cd36c2c7c18477cf933bacba1628fe3a178b1c9cd029ae53f7c3f61fcbfac58258c81ef035d9b17df6d0e0c21dfef70c49294321a0a5c31cb5efc8","ssdeep":"","tlshash":"2470000c388080288230280ea0380328a882038f0020e280000e080000082882aa2038","size":25,"data":"","first_seen":"2023-03-07T12:12:29Z","last_seen":"2026-06-29T06:47:16.452727Z","times_seen":942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/id/76561197960265754","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"002a315aad7f92782241fd549262b6a4","sha1":"2b084a170afc623df7048ce19fd74c2a05bdd938","sha256":"af35f63b9306c671ff1baa24b3e260b6295ae79d9f33dcf68a988f9284a4c53f","sha512":"348c5203a67743de9f5d2237842f348ce68d02a89d4b49f5fbe8bdc2c19da423f6d2887aae34c5f182e13678b6f64b97145356424fe9fbd0d16020e0d29146e4","ssdeep":"","tlshash":"bba0026911581864438577efc067707ea90b254f542ed186550513a1c141674539613a","size":64,"data":"","first_seen":"2023-03-07T17:32:18Z","last_seen":"2026-06-28T10:05:13.8404Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/id/76561197960265754","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"d936aa81eb32dfba9b3ce55c65fa5680","sha1":"1485828d9551fd1ca2e2640bfac639e4b6ad21d8","sha256":"2886e4d22509797ab7032ead9362a76d46cb9c21019198033bf83332877ba86c","sha512":"775e85eaae2276c12e3ca38e6375498150b6a8d409fc5d360c0ee8e28f8123054d3fa51b21779889b9c1babdef01ac28bcef96fd3f0187b79814fc4108c824cf","ssdeep":"","tlshash":"d1d0a90bf0bb11a9087b3cd9968b7334ac9150ab46c0aa7e7e1d82e01f2c822270130f","size":285,"data":"","first_seen":"2026-06-28T10:05:13.842447Z","last_seen":"2026-06-28T10:05:13.842447Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/id/76561197960265754","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"de15e10a93891215f3e63fb0a454d02e","sha1":"eba71330a6c4c6a2a7610c6bdd8bf1b69f8434a9","sha256":"7d26534e2befe8c125aa3fa2c00aa7b22c3abc2405b648dba12e8c620dbd711d","sha512":"4a06076c54e506586823bda20030f8a6d64c2ba849210650e3cdfcde1e2c897975ae018a9e6df815fa7d531d29e43566d30bd94fb77fdb57b1cb54988ed98ea0","ssdeep":"","tlshash":"3bf0265aaf612024d222c6aec40ad2852531800b8cadb8303b2ca3440f5d22dd3b2b89","size":611,"data":"","first_seen":"2026-06-28T10:05:13.843882Z","last_seen":"2026-06-28T10:05:13.843882Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/id/76561197960265754","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fbfdc0429e263796d6565c9518cf90c","sha1":"f74ced833b3dde73dd81c798ffc9a0c2e28d709b","sha256":"bde84f886eb83df59795e1169602618d64084c219e58aa9d5f88b52e506a8e27","sha512":"210ea51e71d98a7906ce00305da411dbe1687bcc3ceddc4f6e085603addef71c2db8e5a370f0bd77f4a86e9f6f7798803c2c3168994c10f9e7b9afafbee05c55","ssdeep":"","tlshash":"8dc012249e0b12d73c5821655bb81980c7d041fa7d90f44cb30fd8314fca416ca7e1ec","size":147,"data":"","first_seen":"2026-06-28T10:05:13.845302Z","last_seen":"2026-06-28T10:05:13.845302Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/id/76561197960265754","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ea05dfc3a4d65779d70f8a6f0228031","sha1":"0fc5ecb579b0ae13059cee2e186b94751b7031fd","sha256":"3b77c3fef8433452f09639c0968f79ecf6d8d530b6ae528d18672ab44a6776ee","sha512":"c78797ae8250b793fc6196d2ab51a5044def2242e73ec0ff674634d954add4474af7e36149e043e631f3e8dbd45a403dc5fe27f75993c67c0991ffd436374777","ssdeep":"","tlshash":"00e0c25aa0c3d646c2d38ca06fe79104943038dbb19cf416399c0a235f0ae2b8ba6dd8","size":407,"data":"","first_seen":"2026-06-28T10:05:13.846767Z","last_seen":"2026-06-28T10:05:13.846767Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/id/76561197960265754","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"60a19a0af253d8a543a26a89e15974d5","sha1":"fa167cb33b695b612d42028369fa88f3632efdbf","sha256":"55dd64db94a8ab632397ba6a0c457342c0f7d92d431f9fc58675e7f5e04e9325","sha512":"a489aa38286d240fdb5dc15a67d88eb2ca6ec71165bd5172d38cfa2d49a55fa5adb03ef235bcdc4ed22a767947813019bca97f3c0dc70745ab4c8ece8fda15bc","ssdeep":"","tlshash":"0411288a50f242b705b7247f63eb87847b740047308cda223edcca4a2f805611bd4696","size":1002,"data":"","first_seen":"2026-06-28T10:05:13.848309Z","last_seen":"2026-06-28T10:05:13.848309Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/js/jquery-1.8.3.min.js","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","size":93636,"data":"","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-06-29T12:33:17.929672Z","times_seen":36009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/js/tooltip.js","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d91ec3956aea93ae67b2ac9622c32ee","sha1":"f0dc6600139010ee6cf0bde5d244f7a42ae77f58","sha256":"6d35b8218095ac1b5acd7d3226081b4eb3a9ecc3fad6aa07997ae48d977d36b6","sha512":"a556f860b5aad74968412c6b41ed5d44c55fcafc65cb1b34735502c2bd3c89df185468481634f32987e9418132d6a14021074858ad19f7434eb20fb841c8a297","ssdeep":"192:h3ug34ZknOPADCO0Pzmla3uCXDJiC7ZEb9k9Hdqyo0WPn4PRP/4PaP34Pjc+8ubZ:h3ug4R4sylBEJpocOFJ2eu+vX","tlshash":"78725491f73d20ae407ab3be896d2388b33e40b65561f8757d7886743a4e4970392fe4","size":17318,"data":"","first_seen":"2025-09-27T06:23:36.318425Z","last_seen":"2026-06-28T10:05:13.805824Z","times_seen":642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/js/main.js","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ca5a7da784755847baed10525bffefb","sha1":"fbcf5782f820fda7ae9c1fefb0ebd0077b4c3e4c","sha256":"706f3bfcb5ece6afae2e24698168e99c4b6046ea689086924f886cdf7b1c3a72","sha512":"342540b66454f30d739a8166ad400f367bb8aadbb9a13691f5254aef0d98d58618452b81f83b1698843145bc96c19dc7e571579f395f1dc6f03198b98cef167b","ssdeep":"","tlshash":"3dc02b3c19fbe43001f1f119b01e2222367724534740a407a00c43cb6dc0e4445f2cbd","size":140,"data":"","first_seen":"2026-04-14T14:27:20.489224Z","last_seen":"2026-06-28T10:05:13.801907Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/js/api.js","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"df8bc3177cc78242e04ea8b3efff5e31","sha1":"9eb105747fd1b3f45303f51b926674a5bfa745da","sha256":"58f27fe7f994d73ca02410722e43b47b8873bce0494bcede5cf519d4092f5b88","sha512":"34385af61f64dfb63dde73669a3b8c11bb2bf2a7bbae11414714da61517b0e489ae98cd4afe264a7f7a4dafeafa01a299e9a28f7458b7d648b4721caa5e500d3","ssdeep":"6144:hw+kqy0DiA2XuYqpSSjTuLxWbg1lzV/7GAms:l4uW9","tlshash":"c054937ba335632f129581d150ee2117a3f1c62a344d5018f733a8defc6ed97217aa3a","size":300903,"data":"","first_seen":"2026-01-28T15:47:18.856376Z","last_seen":"2026-06-28T10:05:13.832018Z","times_seen":3519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/js/help.js","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e39bb628ee16df96926cced6633ed29","sha1":"ba623f0bf94cc12cba8ae7f39a0f529b39e65ca8","sha256":"dfe77798bed8fb5443cc9b7cf233434aca1fcbc7a089fa88e14d42cdfd62eef0","sha512":"6bb04b4ab570d2655ab3879d36b2a8cefebd6b234982149898426592084a5603b29acc25466c97dc220e1e38d91eca1633bea64922e390859f7f686ac796f137","ssdeep":"3072:YkTNxNL5QP+ztE/8HwlrxGNLSq1NLFWdw:YkTNxNL5QP+ztC8HwlrxGNLSKNLFWdw","tlshash":"cdc3c3d9fb5d186e8831227cdc9e60c9353e8433b60518babcc8036477d4a6e6736f69","size":124745,"data":"","first_seen":"2026-02-09T10:00:18.039192Z","last_seen":"2026-06-28T10:05:13.812454Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/js/dselect.js","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c34095fcf02fc37500535c01c105959e","sha1":"54ce027b82d18356f535df4fd3cc879c01cb62a3","sha256":"6b9f2a2c6be7ec51b932534e3500b4bfd0f4017bd48231e8e8a7c948d151c976","sha512":"976775275db96f70544bedf2052099cc080d7abeef9296b2f1fb441f9f25f2ab8ad0f8292ba94279b9305593ff3a00cbd27fd96d92a485a21014986c4580321f","ssdeep":"192:MRfE8jdnRqi49tazp+SJ2GvZg2gECs148kgsaWEE+WTH1VbEIhksB:MhOdLSwCbkg8f1VT+Q","tlshash":"79229650b32c17e910be04bfcdc59de8656ca9f68c0358a2bd9881ac75d45ab13fdc1b","size":10005,"data":"","first_seen":"2025-12-17T07:06:50.845749Z","last_seen":"2026-06-28T10:05:13.813487Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/js/shipping.js","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"68101a352dae0184238f221b3250b8fa","sha1":"ba43eacad47807112c9403e972b9ea5bd11e8fc4","sha256":"91f15c60a42c895a4003d869927da7066a715c672ff494cb0ddf29026d4807aa","sha512":"b6efbfa6d47669d96c8dd33f7e6d98fab8b90a323fe9083cbbe464af351431352c947ac49628ec8aeac5b5ed16f4b8647f5fbed2d251d176b1ae9c94d1056e6f","ssdeep":"","tlshash":"c9813000aaf516597e2d33b1587db3175a5827e03b8f0872f07c7395ba90e25fe3a502","size":3866,"data":"","first_seen":"2024-12-31T17:07:45.18009Z","last_seen":"2026-06-28T10:05:13.810676Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/js/shared_responsive_adapter.js","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bac702d6925e986d1858bc358a80245","sha1":"1b13df34aa2f41a0677596400cbbfe39d4fbd8df","sha256":"6b309ec4eb5e906ad28ae0555a648ed507278e158a7e6bdceeae64e3f3aea443","sha512":"2058cde04b31b8a58c163b6c7b50848e186fd86fda4c38eb2185143fc8463a4449e2f355c8cb37a2f7b37abff67d480948173c0853e09d94f48077c9751f29f6","ssdeep":"384:reGUcz6olWUtpanMMY5CqHB0tRZM7ZEQx/kjHBc2gdXf7h6og:reG7z7WUtpwYZB0TAEosjHCNZ7O","tlshash":"f9b2b4a9fb5e1276817a321c2b5f24cf327c88f8710a9c827d70255c7a8655e07e6f4e","size":24082,"data":"","first_seen":"2026-01-21T20:51:42.937615Z","last_seen":"2026-06-28T10:05:13.817216Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/0rr7gydz68lw.js","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"461e7e8bcd643b12a9b2173ba65430e7","sha1":"681651724731aaf063f3091a308177dc9d75a399","sha256":"c5d493bf9e096fdd54a7f1def5b8ca284b4e5e812af7410fbc516912837e066d","sha512":"6da8df94c9a9ee88d934cc0a5d803d8f88551a847fceca6bbd27686140bacae7d582f63a05c66e7ce1fd5262e7bfa8c364e2d1725845dc711016663c5661da9e","ssdeep":"3072:itlFzyosQiBpO+iVGWic/qTv1gIRZj77PLUiAOw1gwaf6dEURoCaE:mlFzyxQizO+iVVic/qLdj3LeMpIFp","tlshash":"8094b4703bc0a85c17978bbbb22fb4e5fd6a086f3c54489bd100fd6065a6626faf1531","size":418603,"data":"","first_seen":"2026-05-17T14:37:54.266825Z","last_seen":"2026-06-28T10:05:13.827806Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Support Generator loaded","filename":"https://help.valverestore.com/assets/js/main.js","line_number":4,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"help.steampowered.com/public/shared/images/popups/btn_arrow_down_padded.png","fqdn":"help.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:44.002Z","timestamp":1782641084002,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steampowered.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:66:D7:D2:99:D6:A1:56:A5:A6:D9:94:5C:88:56:DD:5C:41:8E:49","sha256":"C5:81:A7:0E:F1:39:43:B6:7A:5C:E3:67:B5:C9:6C:8C:D4:AD:B1:96:E3:F0:6B:88:9F:83:D4:2D:94:97:36:7C"}}},"request":{"raw":"GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1\r\nHost: help.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 161\r\nLast-Modified: Fri, 22 Nov 2024 19:11:30 GMT\r\nETag: \"6740d762-a1\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccept-Ranges: bytes\r\nDate: Sun, 28 Jun 2026 10:04:44 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":161,"size_decoded":464,"mime_type":"image/png","magic":"PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced","md5":"f2dae37acac6b9d5a91caf1885c2f7d0","sha1":"5f80fdde9f702a1d7589bc5faf88c14066e26c32","sha256":"93b1fbe4f6245b62bfd4c8c3347abe0fe67ed711315e59bfadaebc9873d8d9b5","sha512":"8d7ff7133ab97d81985c50fa8fd93916b42b1ce812af21bc732dcae45d59b9154fcc965857235d925c471db191dfb79c0753c70c7a4d5b0285b908e396216805","ssdeep":"","tlshash":"95c08cc1bb64ed58dad20363a596802084a30a844a53836ca9a6c875023aa01c8d1f46","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-06-29T06:47:16.424791Z","times_seen":3580,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":187,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/favicon.ico","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:44.436Z","timestamp":1782641084436,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==; timezoneOffset=0,0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:44 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 38554\r\nConnection: keep-alive\r\nLast-Modified: Thu, 09 Apr 2026 16:43:39 GMT\r\nETag: \"69d7d73b-969a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38554,"size_decoded":38776,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"231913fdebabcbe65f4b0052372bde56","sha1":"553909d080e4f210b64dc73292f3a111d5a0781f","sha256":"9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad","sha512":"7b11b709968c5a52b9b60189fb534f5df56912417243820e9d1c00c97f4bd6d0835f2cdf574d0c36ecb32dbbf5fc397324df54f7fdf9e1b062b5dbda2c02e919","ssdeep":"768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh","tlshash":"70038de82e4917aee9e2cf324adb6716237b4f88c0bc169742b07f193175a51c6d78c1","first_seen":"2023-04-05T07:02:49Z","last_seen":"2026-06-29T06:21:10.334083Z","times_seen":6612,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/images/c284e73b6f3321864805d66f99924a0da9f0b219.jpg","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.895Z","timestamp":1782641083895,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/images/c284e73b6f3321864805d66f99924a0da9f0b219.jpg HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:48 GMT\r\nETag: W/\"6986d114-468\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1128,"size_decoded":1320,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 32x32, components 3","md5":"ac48ba57d620866c4608978b947031b5","sha1":"4a3ad3cbf86189092ca68b2452aa2002f8b4c69c","sha256":"3b4f5ea4e38c023012966c0db4ab56b583bf43fbdc9c41a4ae5281cd4a6c2a3a","sha512":"709045457fa32e9ac4468c5c59869c9298c42943f1784f769e4f74894174be794de06c1c6bbe685ce2e135fb7c416fd3e79ad0668ad5a58af6fcc59bdbd9dac5","ssdeep":"","tlshash":"c221b505b363e9f4f57c1eb14a784eb262e72d02bbda978b40ec3180f03678d2907425","first_seen":"2026-02-09T10:00:18.043386Z","last_seen":"2026-06-28T10:05:13.774197Z","times_seen":11,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/css/app-455634.css","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.609Z","timestamp":1782641083609,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/css/app-455634.css HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Wed, 08 Apr 2026 17:46:44 GMT\r\nETag: W/\"69d69484-1a5a1\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":107937,"size_decoded":21031,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a102a41a2455db968097446fd5316b96","sha1":"550621681d05de271716b2ed53bc43d6392965b9","sha256":"a8602ca86759e68e0037b82f13a22f381484c51acb5bbc5b8744d17580e3934b","sha512":"50cbb0426332f22327e8a47dbf6b06468ce324f897a15bb858fc37d083da7f7919399004bc81b437d8272e1fe660ad44d12d758294afce50af6124d2267cdc29","ssdeep":"768:sy/DCLS4M7fZNjrcds6oI5NBepFunfFLER/XSmc0K3Ae/LC:sy7J4M7cLEpimc0K3Ae/LC","tlshash":"15b38429a2d4303b7c37d4f1f191a68ef13650c2df374baef9457268c2972ea1a63116","first_seen":"2026-03-27T14:51:21.539805Z","last_seen":"2026-06-28T10:05:13.77607Z","times_seen":5,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":65,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/css/shared_responsive.css","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.617Z","timestamp":1782641083617,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/css/shared_responsive.css HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:46 GMT\r\nETag: W/\"6986d112-5375\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21365,"size_decoded":7703,"mime_type":"text/css","magic":"ASCII text, with very long lines (1673)","md5":"6baf08eb062493252b68147e54dbed29","sha1":"eba74b0565f54492d93b0a789848009b74287660","sha256":"7c4eae211f2e70250050f3be9dcb05d4ae2ce286f3af7649ddc124ed76e9a096","sha512":"7ab76d95433a7b981a071e1af5c588640233c61f754744259ac5d5ad03cd8c186f11dc5f7f6a24d9f9764b4884acaa7ef9f743cdb4d197b5dc4961f0503b60ff","ssdeep":"384:hl5qYb2mQXrUgCYezhmVJzeQj/H6TKlojyl26lK:j5qFmQXPCczeQjv6q2t","tlshash":"cba285176e20a102b30e7259fe569f25272fc1597f0d8e5ab7b9316862c539d00a3bcf","first_seen":"2026-01-12T18:38:29.849818Z","last_seen":"2026-06-28T10:05:13.777686Z","times_seen":15,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/images/header_menu_hamburger.png","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.849Z","timestamp":1782641083849,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/images/header_menu_hamburger.png HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:46 GMT\r\nETag: W/\"6986d112-ec1\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3777,"size_decoded":3771,"mime_type":"image/png","magic":"PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced","md5":"eabc76eb57feae44add7faead028521e","sha1":"4e3e53938fad15661d2d046a868338841a95db19","sha256":"fc9e6260a2706ae146282d77e67bc1b74688435f8912ab4c1932641eec28bffa","sha512":"5c6da6eeefddf321c2bc7e39a134e0a3140a9f93ad1560b2e102ef60ec218c29aae14ed344c79e25cc5493cd15551040d8c909de28dcab02034d787563104e07","ssdeep":"","tlshash":"eb717ce7323e5456e1f056c6015b52f69eb1a1080d2b4e09f224b77831ac63be38333d","first_seen":"2023-04-05T21:31:08Z","last_seen":"2026-06-29T06:47:16.436706Z","times_seen":7366,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/images/header_logo.png","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.851Z","timestamp":1782641083851,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/images/header_logo.png HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:46 GMT\r\nETag: W/\"6986d112-2a6f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10863,"size_decoded":11003,"mime_type":"image/png","magic":"PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced","md5":"a4e79c73ee13cb25b60fc4b0ba1f690c","sha1":"b690c31b2eb1b0eb085e91aaae7e79f03debe7c1","sha256":"6cb869df089146c12efb5e9c968e911c314842624ba6f052a11346ac734cadc8","sha512":"aad423119f410a655f0aa475d2fe692087d7262c3986ce71347981c5b60f6a10031d7050bf9b9aee4e7d84d814f0b8883c964028fcbe14ed3464602f3ba6cec3","ssdeep":"192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM","tlshash":"4722c06cfcc0c875958352ba3e27fb7043f93e10c44b86b86960e5a5365c8f4959d137","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-06-29T06:47:16.448375Z","times_seen":7340,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.steampowered.com/public/images/blue_body_repeat.jpg?v=2","fqdn":"help.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.989Z","timestamp":1782641083989,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steampowered.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:66:D7:D2:99:D6:A1:56:A5:A6:D9:94:5C:88:56:DD:5C:41:8E:49","sha256":"C5:81:A7:0E:F1:39:43:B6:7A:5C:E3:67:B5:C9:6C:8C:D4:AD:B1:96:E3:F0:6B:88:9F:83:D4:2D:94:97:36:7C"}}},"request":{"raw":"GET /public/images/blue_body_repeat.jpg?v=2 HTTP/1.1\r\nHost: help.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/jpeg\r\nContent-Length: 65743\r\nLast-Modified: Fri, 22 Nov 2024 19:11:30 GMT\r\nETag: \"6740d762-100cf\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nDate: Sun, 28 Jun 2026 10:04:44 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65743,"size_decoded":66011,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x690, components 3","md5":"105f079801573f86f1eb00e5a5859b5b","sha1":"a25da185557ecc0eb30943f902723b415bba4728","sha256":"b258176e6b291343c18679962ab8658108451a22f12a5aecab106501d8bc091e","sha512":"fb3574ade953ac8dc2dbd866d035327b73e1ad47528a878bf6b8c328679f44d7cb513a57e74a2e0489a5b42fa1c8992e9ee73ec54f7f19047f2e863be5fbc8f7","ssdeep":"1536:rNLzMwRMBrmzHC4IO0cYFmL+76ELuC+ZYJ+pGXN:JLzVm6dIO0tmqoZC+G9","tlshash":"eb5302cbb65c7693f2ac857ee6cae599ee317f84b11441eb4385882f04210ad5e17cd4","first_seen":"2023-05-21T17:27:57Z","last_seen":"2026-06-28T10:05:13.780466Z","times_seen":66,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":7,"connect":1,"send":0,"wait":164,"receive":13,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.steampowered.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015","fqdn":"help.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:44.140Z","timestamp":1782641084140,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steampowered.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:66:D7:D2:99:D6:A1:56:A5:A6:D9:94:5C:88:56:DD:5C:41:8E:49","sha256":"C5:81:A7:0E:F1:39:43:B6:7A:5C:E3:67:B5:C9:6C:8C:D4:AD:B1:96:E3:F0:6B:88:9F:83:D4:2D:94:97:36:7C"}}},"request":{"raw":"GET /public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 HTTP/1.1\r\nHost: help.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://help.valverestore.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/octet-stream\r\nContent-Length: 124048\r\nLast-Modified: Fri, 22 Nov 2024 19:11:30 GMT\r\nETag: \"6740d762-1e490\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccept-Ranges: bytes\r\nDate: Sun, 28 Jun 2026 10:04:44 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16060,"size_decoded":16384,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\"","md5":"982011cebb1628a3c79329cb3b044925","sha1":"d6bebd05fd8fbb68443dd9d532419a2cca57cefb","sha256":"6d32adbba16f1ef3a2433c921edc3ec30727184df7dfc24f47cd3908c04ffc5a","sha512":"c4a92527fca40ecb79b2ad735839c10fc26bbe15d59355fd844ff3b44865f40348a5ef4a3143572e847fc64ace4ce0ec1a22ad94586481dc73514cc80e2cb22d","ssdeep":"384:BrEutgJHNPijjjjjSddd3CSdddddddJuAYJr:BrEOgJtP5Ur","tlshash":"1f721f80b6805e25c12013bfef96c7a46262fcc96d06ce0f3e87e5309d5f9663b54ae5","first_seen":"2026-06-28T10:05:13.781764Z","last_seen":"2026-06-28T10:05:13.781764Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":149,"receive":2,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.steampowered.com/public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015","fqdn":"help.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:44.245Z","timestamp":1782641084245,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steampowered.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:66:D7:D2:99:D6:A1:56:A5:A6:D9:94:5C:88:56:DD:5C:41:8E:49","sha256":"C5:81:A7:0E:F1:39:43:B6:7A:5C:E3:67:B5:C9:6C:8C:D4:AD:B1:96:E3:F0:6B:88:9F:83:D4:2D:94:97:36:7C"}}},"request":{"raw":"GET /public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015 HTTP/1.1\r\nHost: help.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://help.valverestore.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/octet-stream\r\nContent-Length: 133600\r\nLast-Modified: Fri, 22 Nov 2024 19:11:30 GMT\r\nETag: \"6740d762-209e0\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccept-Ranges: bytes\r\nDate: Sun, 28 Jun 2026 10:04:44 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34492,"size_decoded":34816,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\"","md5":"94a8e55547d8ac0b621afed85da8e768","sha1":"dbbd298f26e16c14e767371a46c66b163993492a","sha256":"928faff521346a6882cf3139bc231c051e1e0c0da0d01de07b49e834a9a939f3","sha512":"d4063ed72471be2787f8f3203b703e71667f22d1c73a6ce04922cccef25589d82ef073979f43cec001394f3687bb456ed6e2a4d525a3d40f71c0b403e21d0916","ssdeep":"768:fpH90000oOUPhJHKJ00000WgKhh5k4hLPNJ+eynz0blOG:fR90000yU00000WgKk4hRJCgbld","tlshash":"b4f23f80fe08db00d5979f797e63c3e213217db1ae4e430b7191ba0e78f9145aa1769b","first_seen":"2026-06-28T10:05:13.782852Z","last_seen":"2026-06-28T10:05:13.782852Z","times_seen":1,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":179,"receive":2,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/css/buttons.css","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.610Z","timestamp":1782641083610,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/css/buttons.css HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:44 GMT\r\nETag: W/\"6986d110-8e79\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36473,"size_decoded":5101,"mime_type":"text/css","magic":"ASCII text","md5":"25881b90a0ce0119a61231ea5688f035","sha1":"a5c1b63eea8d5e5e12c5a5141deedf0316b7aaec","sha256":"d1c259d645161358bcdcc7d07c4144cda32cbfa675bc084b84b9ba25323532ec","sha512":"d71e223b3071a4515f7f633e7cd087d833c3a1a40ba75c98ea9f599fc3ec1b3a1c8461105680e6c31b1cbe0bcef7fa61af7b581b41ce409ced2140764e4a7ac0","ssdeep":"192:X9MA5hhzxcbeYatuUxpC2hSGz0usVWnGsws9cbpWG0WASsaZsMtAmYabUoByYagD:l5/z6bJaBhSdbiabUo7aZaKj6vvZfGU","tlshash":"1cf2ce99b38c70753237e1e065175fe86a7a109e88670f9efab5b2bc13da0ec1535813","first_seen":"2025-05-26T14:57:53.038233Z","last_seen":"2026-06-28T10:05:13.78394Z","times_seen":31,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/images/logo_steam.svg","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.852Z","timestamp":1782641083852,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/images/logo_steam.svg HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 3646\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:46 GMT\r\nETag: \"6986d112-e3e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3646,"size_decoded":3867,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31aabe1e01f27b3b9b47d7265807afc2","sha1":"a430f5a8a81145215c41c3ba80929627e570d81e","sha256":"3a4d08139646d567a612f75b8179641c570d490f8013478d131266ed21f3d453","sha512":"60dfb140295124b3f6b57592504ca6006c22988bba82bf63c5559fa7f8da2aab7e163265abb2a312034875f95fa850bbacb620ecca6c56ea8e79689963cd31c4","ssdeep":"","tlshash":"f971b4cc17338be06595c27e1e7476d223b365a9e8b001e8a3920c202c0bfe69a64d75","first_seen":"2023-10-31T01:09:47Z","last_seen":"2026-06-29T06:47:16.437402Z","times_seen":2891,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.steampowered.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015","fqdn":"help.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:44.224Z","timestamp":1782641084224,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steampowered.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:66:D7:D2:99:D6:A1:56:A5:A6:D9:94:5C:88:56:DD:5C:41:8E:49","sha256":"C5:81:A7:0E:F1:39:43:B6:7A:5C:E3:67:B5:C9:6C:8C:D4:AD:B1:96:E3:F0:6B:88:9F:83:D4:2D:94:97:36:7C"}}},"request":{"raw":"GET /public/shared/fonts/MotivaSans-Light.ttf?v=4.015 HTTP/1.1\r\nHost: help.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://help.valverestore.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/octet-stream\r\nContent-Length: 122660\r\nLast-Modified: Fri, 22 Nov 2024 19:11:30 GMT\r\nETag: \"6740d762-1df24\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccept-Ranges: bytes\r\nDate: Sun, 28 Jun 2026 10:04:44 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17881,"size_decoded":18205,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\"","md5":"a64e4d26647e52395aa29f53c45ebbb8","sha1":"9a1e70686c9243eee21ef482b0f288f43e125849","sha256":"de70f7bfcee652e191d4571f64cbfc0e4b97cdbcb0c96db516fe332a5a941dc1","sha512":"75900d8d34dd216405a1dd55f50baef42730be518e208ec5dbc630167d24ee2a0f828a1c6eaac2b4198a19659e6e3bf4af6eb0db646a11d243d37ab9bbea4ea9","ssdeep":"384:6Y1HDL63333nZ1iDeLLLLLq/bD3Sb+FzeiP:j3m1u5KbAz/","tlshash":"4082bc807b00de14d1959bbd2f67c7e46360ffc06d03930f369a69464eab1da2b27ac5","first_seen":"2026-06-28T10:05:13.799582Z","last_seen":"2026-06-28T10:05:13.799582Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":191,"receive":2,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/css/shared_global.css","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.612Z","timestamp":1782641083612,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/css/shared_global.css HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:44 GMT\r\nETag: W/\"6986d110-15005\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86021,"size_decoded":22809,"mime_type":"text/css","magic":"ASCII text, with very long lines (1819)","md5":"616a132654a9dd1cde2858d3368c0062","sha1":"67fac21c607afa819d60159f2cbae89b4743f315","sha256":"b07b511afd0e6be998622a828699bc01f47194dfadb78e8e5dfdcff995004dec","sha512":"3c1ef1b1d7ef58775e750d0631177d685b6a708f3ccf1ee5a5c9181749fb2b047d8a498ec175418b3df8e74a12aecf15cba118cf046f7d12552e2180452d72c4","ssdeep":"1536:+XsHeX5CzkucKN9GISh8xNrhOd8Kt/h+TcLrTcK6e6LwHAfnh87C:EuhN9GMxfOdJnTcKB6LwHAfnhCC","tlshash":"5b83d833a6953547732f94a9fa17ab5ba33f0187eb0e8fa9f161352cd3840d41273a49","first_seen":"2026-01-12T18:38:29.854202Z","last_seen":"2026-06-28T10:05:13.800894Z","times_seen":12,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/js/main.js","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.627Z","timestamp":1782641083627,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 140\r\nConnection: keep-alive\r\nLast-Modified: Wed, 08 Apr 2026 16:40:12 GMT\r\nETag: \"69d684ec-8c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":140,"size_decoded":383,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"4ca5a7da784755847baed10525bffefb","sha1":"fbcf5782f820fda7ae9c1fefb0ebd0077b4c3e4c","sha256":"706f3bfcb5ece6afae2e24698168e99c4b6046ea689086924f886cdf7b1c3a72","sha512":"342540b66454f30d739a8166ad400f367bb8aadbb9a13691f5254aef0d98d58618452b81f83b1698843145bc96c19dc7e571579f395f1dc6f03198b98cef167b","ssdeep":"","tlshash":"3dc02b3c19fbe43001f1f119b01e2222367724534740a407a00c43cb6dc0e4445f2cbd","first_seen":"2026-04-14T14:27:20.489224Z","last_seen":"2026-06-28T10:05:13.801907Z","times_seen":4,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/images/609f27278aa70697c13bf99f32c5a0248c381f9d.jpg","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.892Z","timestamp":1782641083892,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/images/609f27278aa70697c13bf99f32c5a0248c381f9d.jpg HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:48 GMT\r\nETag: W/\"6986d114-4ca\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1226,"size_decoded":1317,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 32x32, components 3","md5":"36c0e361b48289c116c417c67fcba680","sha1":"609f27278aa70697c13bf99f32c5a0248c381f9d","sha256":"3fb721d4f89ad130676cd39b48d40c66d2cf051d114606556d5334d74c3621e3","sha512":"362ca67d9555a05780a0bf4e8d33ec002656ef4538d2630ac52fca104e478c759645f1201ecb0fd33d25094a351614286b7a43d242f0aade48171651c4a133bc","ssdeep":"","tlshash":"3021ca04c74247c4fc6254bec5112d52b6ed1ac23ca0255f76da94e2eb107c44b24adc","first_seen":"2023-06-05T08:51:09Z","last_seen":"2026-06-28T10:05:13.802981Z","times_seen":111,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.steampowered.com/public/images/arrow_right.png","fqdn":"help.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:44.004Z","timestamp":1782641084004,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steampowered.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:66:D7:D2:99:D6:A1:56:A5:A6:D9:94:5C:88:56:DD:5C:41:8E:49","sha256":"C5:81:A7:0E:F1:39:43:B6:7A:5C:E3:67:B5:C9:6C:8C:D4:AD:B1:96:E3:F0:6B:88:9F:83:D4:2D:94:97:36:7C"}}},"request":{"raw":"GET /public/images/arrow_right.png HTTP/1.1\r\nHost: help.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 1096\r\nLast-Modified: Fri, 22 Nov 2024 19:11:30 GMT\r\nETag: \"6740d762-448\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nDate: Sun, 28 Jun 2026 10:04:44 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1096,"size_decoded":1360,"mime_type":"image/png","magic":"PNG image data, 13 x 20, 8-bit/color RGBA, non-interlaced","md5":"9144bec4573db7b865c7678ac940199a","sha1":"03f112ba8b6dbd6c3547763c9f195b17f6f6ae87","sha256":"18af5ae91365e0ef0d029cac6cd819377bc1daef5f4d55dbe9767c10c86adf29","sha512":"f11a724f249797b1e9a3500b4ea4b891ddc44c6b3079ff94983513f85e13e1dba3eb3402a838a78c60d5948b66cfee8e4d4a03f037d67404d6737fa9d80f11f3","ssdeep":"","tlshash":"72116649be0068039f1ad94614e79c23990304d095d0e136b2dfa9179560ef755499cb","first_seen":"2023-09-26T02:17:26Z","last_seen":"2026-06-28T10:05:13.804104Z","times_seen":37,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":4,"send":0,"wait":147,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/js/jquery-1.8.3.min.js","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.619Z","timestamp":1782641083619,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/js/jquery-1.8.3.min.js HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:46 GMT\r\nETag: W/\"6986d112-16dc4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93636,"size_decoded":39006,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65483)","md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-06-29T12:33:17.929672Z","times_seen":36009,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/js/tooltip.js","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.620Z","timestamp":1782641083620,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/js/tooltip.js HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:46 GMT\r\nETag: W/\"6986d112-43a6\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17318,"size_decoded":5348,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"2d91ec3956aea93ae67b2ac9622c32ee","sha1":"f0dc6600139010ee6cf0bde5d244f7a42ae77f58","sha256":"6d35b8218095ac1b5acd7d3226081b4eb3a9ecc3fad6aa07997ae48d977d36b6","sha512":"a556f860b5aad74968412c6b41ed5d44c55fcafc65cb1b34735502c2bd3c89df185468481634f32987e9418132d6a14021074858ad19f7434eb20fb841c8a297","ssdeep":"192:h3ug34ZknOPADCO0Pzmla3uCXDJiC7ZEb9k9Hdqyo0WPn4PRP/4PaP34Pjc+8ubZ:h3ug4R4sylBEJpocOFJ2eu+vX","tlshash":"78725491f73d20ae407ab3be896d2388b33e40b65561f8757d7886743a4e4970392fe4","first_seen":"2025-09-27T06:23:36.318425Z","last_seen":"2026-06-28T10:05:13.805824Z","times_seen":642,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.steampowered.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015","fqdn":"help.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:44.206Z","timestamp":1782641084206,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steampowered.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:66:D7:D2:99:D6:A1:56:A5:A6:D9:94:5C:88:56:DD:5C:41:8E:49","sha256":"C5:81:A7:0E:F1:39:43:B6:7A:5C:E3:67:B5:C9:6C:8C:D4:AD:B1:96:E3:F0:6B:88:9F:83:D4:2D:94:97:36:7C"}}},"request":{"raw":"GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1\r\nHost: help.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://help.valverestore.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/octet-stream\r\nContent-Length: 122684\r\nLast-Modified: Fri, 22 Nov 2024 19:11:30 GMT\r\nETag: \"6740d762-1df3c\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccept-Ranges: bytes\r\nDate: Sun, 28 Jun 2026 10:04:44 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16060,"size_decoded":16384,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\"","md5":"ce1f713000b54456cf9359e8543cdb0c","sha1":"b8bf678c70f524e22b2cc252289da9968a906e51","sha256":"885437a179c72645bb41f7a196cc1096ee9332445c72e0151ab680a768680169","sha512":"c1a24385c4c3761b180334b076f2cf895cb98d5a61da2875c3da2662157c452f413c7c2d7836e95f1ed4fb9c8a72a956f85f0cb2b1f573d539aac862744e9a6c","ssdeep":"192:WNK5HePacU1htlllW63WmoYupkDHoEx6h3f6KR2/jhm/G/3AXuNGtj6Xe:W4iHUnGP4ueRx6hiKR2/1QXuNsf","tlshash":"4e72ea80b7005b05f05056bd6fbbc3b0b261b9c5ae528f077792ba219ebd1713b526dc","first_seen":"2026-06-28T10:05:13.806333Z","last_seen":"2026-06-28T10:05:13.806333Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":152,"receive":1,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/images/footerLogo_valve_new(1).png","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.896Z","timestamp":1782641083896,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/images/footerLogo_valve_new(1).png HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:48 GMT\r\nETag: W/\"6986d114-a18\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2584,"size_decoded":2552,"mime_type":"image/png","magic":"PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced","md5":"86a9ccc0b872f22006a48bc6c2500f4e","sha1":"0edccf2cbc869816135c6ff4c3eee0c49d0f41c1","sha256":"d8bbe461137d50211568449468a1981ef189248200eadd48c3141a9df0b8f7fc","sha512":"43ebd681fe137718e45153b9ce062ce9426ac57d6ce907bd3b1c7709bf6f6d2ab4b49e22f2dc4f203dedf860a895a4b58f4a01095e97722ce5f27935038f0b56","ssdeep":"","tlshash":"64513a2ae811ec4252ccecc2a4fbe9123a12c90057c4dbb5fddbd84b3f602d1452d8da","first_seen":"2023-04-05T21:31:08Z","last_seen":"2026-06-29T02:43:02.690626Z","times_seen":2732,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/id/76561197960265754","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T10:04:43.149Z","timestamp":1782641083149,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /id/76561197960265754 HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6441\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nSet-Cookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":33907,"size_decoded":6735,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (550)","md5":"e2c211762d222286db87e058739dfbab","sha1":"c04be0c1a9c2d10e93f8d6d0c0315bc733553997","sha256":"f57d88911a4d4db4a2cd1d038b48a91a0fd57ddbf41a8da1eb2ff21ba28dff93","sha512":"9ef95113376452412fc1513549808747043b831ae21f4e4609e21b12f627a7b4f27fa1a9a77df558dac677d6ab809db3522e7015ff01a45b167a864b4359f03b","ssdeep":"384:gPx+XdHC6Vaof9pfFCa4iAcs6EXyyVIFxWxQ2M:+ETfFJOSf","tlshash":"1ee22f219cf150334292a180ba7a9f3abf81da43e24a9a10b7fc07d85fd6d85db63558","first_seen":"2026-06-28T10:05:13.807793Z","last_seen":"2026-06-28T10:05:13.807793Z","times_seen":1,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":5,"connect":32,"send":0,"wait":162,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/css/store_game_shared.css","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.613Z","timestamp":1782641083613,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/css/store_game_shared.css HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:44 GMT\r\nETag: W/\"6986d110-4816\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18454,"size_decoded":6538,"mime_type":"text/css","magic":"ASCII text, with very long lines (3866)","md5":"877ac3be91357d1f193a5a6a4052c21c","sha1":"492484184fcb0b3f16a2256d975733dbfd261af0","sha256":"ba2cde0da0a18459e35e95b8675958a5ca708ea6326397423af4088aa2245251","sha512":"d1118c361bab1020c8717e9839fe450610694db5a64da4d4a693a7b2188c3ee0fae210494507acff01e57a725b6afee661051994919811b0b6e2907751e81377","ssdeep":"384:ObtFvljP9d3/j7SV7HWmypDra4SRDtq7d3/j7SV7H+y8ZZ:I59dKV72BpDrwtA7dKV7ey8ZZ","tlshash":"f9820a1f2122b8c9b16fd4d9ef41f6b1af0f548bac0c5f4aba95f12cd6480446732b99","first_seen":"2025-10-19T11:02:47.141725Z","last_seen":"2026-06-29T05:37:04.84103Z","times_seen":214,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/js/shared_global.js","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.622Z","timestamp":1782641083622,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/js/shared_global.js HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:46 GMT\r\nETag: W/\"6986d112-25aeb\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":154347,"size_decoded":46878,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2464)","md5":"f38a9abd0a1e72a70cee9e7db0224b26","sha1":"2e7ed93b4c02c4a181b1c46a5bebdb2cf01629c5","sha256":"a5e293cb4002448a8e91f84d71fba900f03ec25e92b907dfba1446934f306a08","sha512":"8a62f764230377ff22e77dba4b9b5488ce17146a928a7e71359ee9a7fa5219c700e1c2d399426dadb807cdc3844fb3ffa71d87f06f4c7062cefa39e98366c65d","ssdeep":"1536:ivZkXRW6Q2hNJRNhUmciMQzoscmDecTV8iqD3YHI1Sp6D3QgQHrMTAQaOLXkwRiI:Z/5UmciZos1DecSP7YHVgOUXKJq","tlshash":"73e329d5eb7c212a897a302ddd4f504a3a7e1832b00468697c5e94dc6ae0d7e43b7e7c","first_seen":"2025-12-17T07:06:50.786611Z","last_seen":"2026-06-28T10:05:13.809422Z","times_seen":169,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/js/shipping.js","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.624Z","timestamp":1782641083624,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/js/shipping.js HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:46 GMT\r\nETag: W/\"6986d112-f1a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3866,"size_decoded":1237,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"68101a352dae0184238f221b3250b8fa","sha1":"ba43eacad47807112c9403e972b9ea5bd11e8fc4","sha256":"91f15c60a42c895a4003d869927da7066a715c672ff494cb0ddf29026d4807aa","sha512":"b6efbfa6d47669d96c8dd33f7e6d98fab8b90a323fe9083cbbe464af351431352c947ac49628ec8aeac5b5ed16f4b8647f5fbed2d251d176b1ae9c94d1056e6f","ssdeep":"","tlshash":"c9813000aaf516597e2d33b1587db3175a5827e03b8f0872f07c7395ba90e25fe3a502","first_seen":"2024-12-31T17:07:45.18009Z","last_seen":"2026-06-28T10:05:13.810676Z","times_seen":41,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/js/help.js","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.625Z","timestamp":1782641083625,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/js/help.js HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:46 GMT\r\nETag: W/\"6986d112-1e749\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":124745,"size_decoded":31670,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (332)","md5":"8e39bb628ee16df96926cced6633ed29","sha1":"ba623f0bf94cc12cba8ae7f39a0f529b39e65ca8","sha256":"dfe77798bed8fb5443cc9b7cf233434aca1fcbc7a089fa88e14d42cdfd62eef0","sha512":"6bb04b4ab570d2655ab3879d36b2a8cefebd6b234982149898426592084a5603b29acc25466c97dc220e1e38d91eca1633bea64922e390859f7f686ac796f137","ssdeep":"3072:YkTNxNL5QP+ztE/8HwlrxGNLSq1NLFWdw:YkTNxNL5QP+ztC8HwlrxGNLSKNLFWdw","tlshash":"cdc3c3d9fb5d186e8831227cdc9e60c9353e8433b60518babcc8036477d4a6e6736f69","first_seen":"2026-02-09T10:00:18.039192Z","last_seen":"2026-06-28T10:05:13.812454Z","times_seen":11,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/js/dselect.js","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.626Z","timestamp":1782641083626,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/js/dselect.js HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:46 GMT\r\nETag: W/\"6986d112-2715\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10005,"size_decoded":3479,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"c34095fcf02fc37500535c01c105959e","sha1":"54ce027b82d18356f535df4fd3cc879c01cb62a3","sha256":"6b9f2a2c6be7ec51b932534e3500b4bfd0f4017bd48231e8e8a7c948d151c976","sha512":"976775275db96f70544bedf2052099cc080d7abeef9296b2f1fb441f9f25f2ab8ad0f8292ba94279b9305593ff3a00cbd27fd96d92a485a21014986c4580321f","ssdeep":"192:MRfE8jdnRqi49tazp+SJ2GvZg2gECs148kgsaWEE+WTH1VbEIhksB:MhOdLSwCbkg8f1VT+Q","tlshash":"79229650b32c17e910be04bfcdc59de8656ca9f68c0358a2bd9881ac75d45ab13fdc1b","first_seen":"2025-12-17T07:06:50.845749Z","last_seen":"2026-06-28T10:05:13.813487Z","times_seen":165,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avatars.akamai.steamstatic.com/bc7a64d737cd955428bc4ccc34469e292292a213_medium.jpg","fqdn":"avatars.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"95.101.10.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.885Z","timestamp":1782641083885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 22:16:13 GMT","end":"Thu, 13 Aug 2026 22:16:12 GMT"},"fingerprint":{"sha1":"60:8A:EC:F2:73:6B:F2:40:62:63:87:97:C1:9A:AE:F5:54:70:2B:F2","sha256":"B4:94:AA:AB:73:AF:A9:5D:C5:54:8C:6A:34:68:75:A7:55:12:D6:C7:0A:5A:D0:C5:7C:B3:E9:91:50:8B:02:83"}}},"request":{"raw":"GET /bc7a64d737cd955428bc4ccc34469e292292a213_medium.jpg HTTP/1.1\r\nHost: avatars.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-length: 3361\r\ncontent-md5: Bo8FvlSyQSPFpZBO70Ec+Q==\r\nlast-modified: Sat, 19 Mar 2022 12:47:19 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DA09A69ADDAF30\"\r\nx-ms-access-tier: Cold\r\nx-ms-access-tier-change-time: Sun, 14 Sep 2025 10:44:41 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=313858570\r\nexpires: Sun, 08 Jun 2036 01:00:53 GMT\r\ndate: Sun, 28 Jun 2026 10:04:43 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3361,"size_decoded":3829,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, baseline, precision 8, 64x64, components 3","md5":"068f05be54b24123c5a5904eef411cf9","sha1":"7156c6b64d395a11d0d3161fe5c03791c7702845","sha256":"a671525336599d4a91e299f7ad88686c07ef9b6cef9c2738fbe71a8d8a46dc3c","sha512":"145fb67130b5fb0797112f16eefdd39e13f965aac8d231d7c3bcf62598ba718e1b09ac835d8812385591115eb6adc1552ee63ba954f5b35cc499da8cab485e77","ssdeep":"","tlshash":"7e616d2b9704de23f4798c347813e641d3ce22786560d6558d88d6637ffe5e2a31f506","first_seen":"2026-06-28T10:05:13.8144Z","last_seen":"2026-06-28T10:05:13.8144Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":29,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/images/8dbc71957312bbd3baea65848b545be9eae2a355.jpg","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.890Z","timestamp":1782641083890,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/images/8dbc71957312bbd3baea65848b545be9eae2a355.jpg HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 702\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:48 GMT\r\nETag: \"6986d114-2be\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":702,"size_decoded":919,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 32x32, components 3","md5":"e89ee7bc3eef1ca9184f69758ba3fe36","sha1":"1d33ae6ef98078966c625bbd7a67a5538dadf4cc","sha256":"9498210d8f9b4268d4396c6e0756a0f414895ae89c8ed5ea972e13b172e4dcd3","sha512":"d409e6b849f5a54ce98050a2049ba9aa210b73b1900c8a27e2df2c91d601d678c0e81c1390774d1d2ca07799b48d9f1e8cce2200f4735bf41575a68622973434","ssdeep":"","tlshash":"0101683d74959346e001f639cd7a031b732a7619e964553c2058c01432570913e26d2c","first_seen":"2023-10-22T09:24:58Z","last_seen":"2026-06-29T00:45:18.486743Z","times_seen":1046,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/css/help.css","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.615Z","timestamp":1782641083615,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/css/help.css HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:46 GMT\r\nETag: W/\"6986d112-13d5e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":81246,"size_decoded":21960,"mime_type":"text/css","magic":"ASCII text","md5":"5b0545955d90eadd4ec71ebf7abd6365","sha1":"bbf1b0c2733885a65abe33b04567b79d8e48bc59","sha256":"5c41c4dd5e58b29694366ec4089570b81a86a0b17bd85d3fa5efc5d37a02840e","sha512":"642a794b845ca62207ef85bebdf4d533402190df75bf7e4b37f171b00c8a67b80ebbd57644093bc6ebcb661ca1a9f64e1079115ea65f6adc9e317d3624396891","ssdeep":"1536:XNoTZuRPU6US1omeWjMUcGzV3hJTxd+dMpUeV1wJMYN/iIQq48E37L6jNrK:6TZCGmeWnV6dMpUeV1wJ7C8ErLulK","tlshash":"2583616b77101c4ab12fa0a9ef95ebb6671f44d3af1e4ea6b850756cd34c1901333ac8","first_seen":"2026-02-09T10:00:18.058406Z","last_seen":"2026-06-28T10:05:13.816213Z","times_seen":11,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/js/shared_responsive_adapter.js","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.628Z","timestamp":1782641083628,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/js/shared_responsive_adapter.js HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:46 GMT\r\nETag: W/\"6986d112-5e12\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24082,"size_decoded":7630,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"7bac702d6925e986d1858bc358a80245","sha1":"1b13df34aa2f41a0677596400cbbfe39d4fbd8df","sha256":"6b309ec4eb5e906ad28ae0555a648ed507278e158a7e6bdceeae64e3f3aea443","sha512":"2058cde04b31b8a58c163b6c7b50848e186fd86fda4c38eb2185143fc8463a4449e2f355c8cb37a2f7b37abff67d480948173c0853e09d94f48077c9751f29f6","ssdeep":"384:reGUcz6olWUtpanMMY5CqHB0tRZM7ZEQx/kjHBc2gdXf7h6og:reG7z7WUtpwYZB0TAEosjHCNZ7O","tlshash":"f9b2b4a9fb5e1276817a321c2b5f24cf327c88f8710a9c827d70255c7a8655e07e6f4e","first_seen":"2026-01-21T20:51:42.937615Z","last_seen":"2026-06-28T10:05:13.817216Z","times_seen":109,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/images/footerLogo_valve_new.png","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.848Z","timestamp":1782641083848,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/images/footerLogo_valve_new.png HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:46 GMT\r\nETag: W/\"6986d112-8ed\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2285,"size_decoded":2523,"mime_type":"image/png","magic":"PNG image data, 184 x 52, 8-bit/color RGBA, non-interlaced","md5":"5cba6abf67ac92684a4782b891a69c9d","sha1":"d560912d1fecebbed7b18b1c472c70f70080bcee","sha256":"ff991cd769572478cdc67d22980851f2f4f028b009445f8e9251e84f0a2aa41c","sha512":"0393790799dd0b93b565c763fde339a6a66e462d72cb82ba8867c6c2fe19c10fd436d339a14287b7fd62c297dd2dd44cdcb8e6125e2eb2193c2c90281a360e2f","ssdeep":"","tlshash":"bf4139cec08ea41678fba99358546eec2a16d29bd8d158f00d98288d3561c7d57fc224","first_seen":"2025-10-15T17:17:10.867018Z","last_seen":"2026-06-29T06:21:10.333012Z","times_seen":861,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/build/assets/MotivaSans-Regular-19b8db16.ttf?v=4.015","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.993Z","timestamp":1782641083993,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /build/assets/MotivaSans-Regular-19b8db16.ttf?v=4.015 HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/assets/css/app-455634.css\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==; timezoneOffset=0,0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 28 Jun 2026 10:04:44 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 9\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":9,"size_decoded":155,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"9e076f5885f5cc16a4b5aeb8de4adff5","sha1":"475c848673a3f79fa778f01c2bd5a721d4c41707","sha256":"e3ebaa16dd9d9b9fc107c42183fb6cf9d22927e1af03dbbdfa0ccc38e4e4ac31","sha512":"4d384838c78c74f56de20de3fe125b9fe4d40b7c9fb5d767b647f05aede6bf63431f4f08ac464e188e77b227becc3ab4ba86272f30b53d91b15003d814e06d2e","ssdeep":"","tlshash":"4a50000c3000030c0000003000c00030000c03000c0000300000c00c000000000000cc","first_seen":"2023-04-05T14:05:15Z","last_seen":"2026-06-29T12:44:31.261603Z","times_seen":9243,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/build/assets/MotivaSans-LightItalic-41464efd.ttf?v=4.015","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.996Z","timestamp":1782641083996,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /build/assets/MotivaSans-LightItalic-41464efd.ttf?v=4.015 HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/assets/css/app-455634.css\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==; timezoneOffset=0,0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 28 Jun 2026 10:04:44 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 9\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":9,"size_decoded":155,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"9e076f5885f5cc16a4b5aeb8de4adff5","sha1":"475c848673a3f79fa778f01c2bd5a721d4c41707","sha256":"e3ebaa16dd9d9b9fc107c42183fb6cf9d22927e1af03dbbdfa0ccc38e4e4ac31","sha512":"4d384838c78c74f56de20de3fe125b9fe4d40b7c9fb5d767b647f05aede6bf63431f4f08ac464e188e77b227becc3ab4ba86272f30b53d91b15003d814e06d2e","ssdeep":"","tlshash":"4a50000c3000030c0000003000c00030000c03000c0000300000c00c000000000000cc","first_seen":"2023-04-05T14:05:15Z","last_seen":"2026-06-29T12:44:31.261603Z","times_seen":9243,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.steampowered.com/public/shared/images/header/btn_header_installsteam_download.png?v=1","fqdn":"help.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:44.000Z","timestamp":1782641084000,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steampowered.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:66:D7:D2:99:D6:A1:56:A5:A6:D9:94:5C:88:56:DD:5C:41:8E:49","sha256":"C5:81:A7:0E:F1:39:43:B6:7A:5C:E3:67:B5:C9:6C:8C:D4:AD:B1:96:E3:F0:6B:88:9F:83:D4:2D:94:97:36:7C"}}},"request":{"raw":"GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1\r\nHost: help.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 291\r\nLast-Modified: Fri, 22 Nov 2024 19:11:30 GMT\r\nETag: \"6740d762-123\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccept-Ranges: bytes\r\nDate: Sun, 28 Jun 2026 10:04:44 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":291,"size_decoded":595,"mime_type":"image/png","magic":"PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced","md5":"a2796187c58c7e948159e37d6990ecc2","sha1":"4209cd85add507247f9ce5a87a8c9095b54ee417","sha256":"23341256db7f44b1f3811880fa2bae6b7748bbf6b62c544a162e38cf0d5c5082","sha512":"5ef103b8398507495c2708df8fcd82bdb763b1d580aaaa6cacfb805614764277c19e8ece5d890a8aafc004fc8c25e3ab2e67d6fbf373c432a9a0d7c36fa0890f","ssdeep":"","tlshash":"83d0ebf3a3e86d79fb52fe97d10180e0465fcaeb6004877889c3880447a81f880f2996","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-06-29T06:47:16.442123Z","times_seen":7301,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":181,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waitingpanl.com/dzvksytijogulloivtmemhnezguaxkrksdtbiwcgcxpatn","fqdn":"waitingpanl.com","domain":"waitingpanl.com","tld":"com"},"ip":{"addr":"45.144.53.193","port":443,"asn":0,"as":"","country":"Slovenia","country_code":"SI"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:44.030Z","timestamp":1782641084030,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waitingpanl.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 16:35:55 GMT","end":"Sun, 06 Sep 2026 16:35:54 GMT"},"fingerprint":{"sha1":"8C:B2:66:F9:84:6F:D0:16:53:6F:24:33:F3:CB:62:B6:FE:DD:B7:21","sha256":"4C:91:95:61:7E:B1:39:40:77:83:43:1C:C2:81:5A:AB:94:A9:67:74:09:69:53:F9:42:79:AA:7D:30:33:63:5E"}}},"request":{"raw":"POST /dzvksytijogulloivtmemhnezguaxkrksdtbiwcgcxpatn HTTP/1.1\r\nHost: waitingpanl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 159\r\nOrigin: https://help.valverestore.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 67\r\nETag: W/\"43-AIZxVInEVHXxp++uy3UgbcRgMcU\"\r\nDate: Sun, 28 Jun 2026 10:04:44 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":67,"size_decoded":412,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f09ad2812124ccb3ac18267d161dbc11","sha1":"0086715489c45475f1a7efaecb75206dc46031c5","sha256":"006375c2c506f2de68e196ecfb2b026f952861114f7f0f6b7b11e8a78bb36051","sha512":"c2ac111635e1c434bc275e141b0fc1e0cfb9415ee15d2acb5c577fd5b795fd11536222ab3f4832ba851bb1744b2e3ca09351ee1272e53c846a950e38cea86201","ssdeep":"","tlshash":"9fa00245956065fd8a134d0c814d2e104b7c00277bc468caf14c2e8851f607b8525133","first_seen":"2026-06-28T10:05:13.819724Z","last_seen":"2026-06-28T10:05:13.819724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":11,"connect":19,"send":0,"wait":132,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/css/motiva_sans.css","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.607Z","timestamp":1782641083607,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/css/motiva_sans.css HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:44 GMT\r\nETag: W/\"6986d110-9c9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2505,"size_decoded":866,"mime_type":"text/css","magic":"ASCII text","md5":"bc25f5bb58f0a5889901d29cf371bd8c","sha1":"ee2b9d26da96d04a4213c902bed337563ae50fc2","sha256":"d2a732e0e873122d500fc6240561405e0947d26a0b75d38b0e7ec1bd2abc8be6","sha512":"8bccb90b96965a65555b9e68f4c2aee9f609d65514305f0fdd436497dbae1a42ddd0ac2e933f3508a94f3ae91bc5ed36db45fa00c2d9c9730bd157ad36734fe2","ssdeep":"","tlshash":"8a511211654c993b4ba50ca7f3cbae1a9e0f341a7017c26184621a64dfa243f1373f5f","first_seen":"2024-12-31T17:07:45.171859Z","last_seen":"2026-06-28T10:05:13.82071Z","times_seen":39,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/0rr7gydz68lw.js","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.840Z","timestamp":1782641083840,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /0rr7gydz68lw.js HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thu, 16 Apr 2026 19:48:14 GMT\r\nETag: W/\"69e13cfe-6632b\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":418603,"size_decoded":154107,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"461e7e8bcd643b12a9b2173ba65430e7","sha1":"681651724731aaf063f3091a308177dc9d75a399","sha256":"c5d493bf9e096fdd54a7f1def5b8ca284b4e5e812af7410fbc516912837e066d","sha512":"6da8df94c9a9ee88d934cc0a5d803d8f88551a847fceca6bbd27686140bacae7d582f63a05c66e7ce1fd5262e7bfa8c364e2d1725845dc711016663c5661da9e","ssdeep":"3072:itlFzyosQiBpO+iVGWic/qTv1gIRZj77PLUiAOw1gwaf6dEURoCaE:mlFzyxQizO+iVVic/qLdj3LeMpIFp","tlshash":"8094b4703bc0a85c17978bbbb22fb4e5fd6a086f3c54489bd100fd6065a6626faf1531","first_seen":"2026-05-17T14:37:54.266825Z","last_seen":"2026-06-28T10:05:13.827806Z","times_seen":2,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/js/api.js","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.836Z","timestamp":1782641083836,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/js/api.js HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:48 GMT\r\nETag: W/\"6986d114-49767\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":300903,"size_decoded":104619,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41132)","md5":"df8bc3177cc78242e04ea8b3efff5e31","sha1":"9eb105747fd1b3f45303f51b926674a5bfa745da","sha256":"58f27fe7f994d73ca02410722e43b47b8873bce0494bcede5cf519d4092f5b88","sha512":"34385af61f64dfb63dde73669a3b8c11bb2bf2a7bbae11414714da61517b0e489ae98cd4afe264a7f7a4dafeafa01a299e9a28f7458b7d648b4721caa5e500d3","ssdeep":"6144:hw+kqy0DiA2XuYqpSSjTuLxWbg1lzV/7GAms:l4uW9","tlshash":"c054937ba335632f129581d150ee2117a3f1c62a344d5018f733a8defc6ed97217aa3a","first_seen":"2026-01-28T15:47:18.856376Z","last_seen":"2026-06-28T10:05:13.832018Z","times_seen":3519,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/assets/images/0bbb630d63262dd66d2fdd0f7d37e8661a410075.jpg","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.893Z","timestamp":1782641083893,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /assets/images/0bbb630d63262dd66d2fdd0f7d37e8661a410075.jpg HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/id/76561197960265754\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Jun 2026 10:04:43 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 07 Feb 2026 05:43:48 GMT\r\nETag: W/\"6986d114-4ba\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1210,"size_decoded":1295,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 32x32, components 3","md5":"ba4e51640291bb03cbd41951d9672584","sha1":"0bbb630d63262dd66d2fdd0f7d37e8661a410075","sha256":"3520b13dd1a7954829eb15cd6abafce4f908ea5c624b9de40c25ccaeff74f87b","sha512":"244a8848bd0d21b9e6b608244346fd4837e513acf88b2c9599f921530ad440c9737c2b33e253cfbdc163453c9114f15b669410b1c55109de44a883a5181ef564","ssdeep":"","tlshash":"9b21ca198b0367d0b823917749031e98e3e99ac034449355bfd59490c680ec5edd4a8c","first_seen":"2023-05-06T10:03:55Z","last_seen":"2026-06-28T10:05:13.835064Z","times_seen":451,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.steampowered.com/public/images/blue_body_top.jpg?v=2","fqdn":"help.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.986Z","timestamp":1782641083986,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steampowered.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:66:D7:D2:99:D6:A1:56:A5:A6:D9:94:5C:88:56:DD:5C:41:8E:49","sha256":"C5:81:A7:0E:F1:39:43:B6:7A:5C:E3:67:B5:C9:6C:8C:D4:AD:B1:96:E3:F0:6B:88:9F:83:D4:2D:94:97:36:7C"}}},"request":{"raw":"GET /public/images/blue_body_top.jpg?v=2 HTTP/1.1\r\nHost: help.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/jpeg\r\nContent-Length: 50887\r\nLast-Modified: Fri, 22 Nov 2024 19:11:30 GMT\r\nETag: \"6740d762-c6c7\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nDate: Sun, 28 Jun 2026 10:04:44 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50887,"size_decoded":51154,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=690, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=2038], baseline, precision 8, 1600x690, components 3","md5":"9b4b2ebbb01be5c4cfe1fcbdd9da0ef0","sha1":"8d17a27b2268930b4ec86c56f9cd0c73ce18ff7c","sha256":"aeacbf69f083c220da60b8994c08cf8cd1505a62a0df5a7c0a9aa4f258bab1e7","sha512":"0a15b6e53c85e193baa7618ab0ff50afe764e613b9d02eada43da6ba23efb7a845e2a39561f935ec5247d4fbcadad1390be91ad10ef913e502ba68879ced53d2","ssdeep":"1536:lqA5Kl4nn9bogS73BTeo7xk884jtUUit4cs114:44nn9bRSzBeU84uL4w","tlshash":"0b336e26fe1c1fd1c5c978331900edb39a354f684b932a96fd7c320a7766d86982439b","first_seen":"2023-05-21T17:27:57Z","last_seen":"2026-06-28T10:05:13.836382Z","times_seen":66,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":10,"connect":2,"send":0,"wait":150,"receive":14,"ssl":213},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/build/assets/MotivaSans-Light-6b7a3177.ttf?v=4.015","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.992Z","timestamp":1782641083992,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /build/assets/MotivaSans-Light-6b7a3177.ttf?v=4.015 HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/assets/css/app-455634.css\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==; timezoneOffset=0,0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 28 Jun 2026 10:04:44 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 9\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":9,"size_decoded":155,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"9e076f5885f5cc16a4b5aeb8de4adff5","sha1":"475c848673a3f79fa778f01c2bd5a721d4c41707","sha256":"e3ebaa16dd9d9b9fc107c42183fb6cf9d22927e1af03dbbdfa0ccc38e4e4ac31","sha512":"4d384838c78c74f56de20de3fe125b9fe4d40b7c9fb5d767b647f05aede6bf63431f4f08ac464e188e77b227becc3ab4ba86272f30b53d91b15003d814e06d2e","ssdeep":"","tlshash":"4a50000c3000030c0000003000c00030000c03000c0000300000c00c000000000000cc","first_seen":"2023-04-05T14:05:15Z","last_seen":"2026-06-29T12:44:31.261603Z","times_seen":9243,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.valverestore.com/build/assets/MotivaSans-Medium-045b433f.ttf?v=4.015","fqdn":"help.valverestore.com","domain":"valverestore.com","tld":"com"},"ip":{"addr":"192.142.45.220","port":443,"asn":148994,"as":"CNC TECH LIMIT ED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://help.valverestore.com/id/76561197960265754","date":"2026-06-28T10:04:43.994Z","timestamp":1782641083994,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.valverestore.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 17:04:38 GMT","end":"Thu, 17 Sep 2026 17:04:37 GMT"},"fingerprint":{"sha1":"DD:59:2D:DA:31:4B:BD:10:A8:98:43:2B:DB:74:FF:17:8B:58:89:BB","sha256":"01:FB:7C:84:77:2D:D1:A8:8F:D3:B4:BC:07:4F:83:CC:F2:6C:ED:D9:B6:73:B6:E6:73:0E:A7:FC:3F:DF:A0:07"}}},"request":{"raw":"GET /build/assets/MotivaSans-Medium-045b433f.ttf?v=4.015 HTTP/1.1\r\nHost: help.valverestore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help.valverestore.com/assets/css/app-455634.css\r\nCookie: sl-session=5eCcTTtDQmpmirNo+Hjq3g==; timezoneOffset=0,0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 28 Jun 2026 10:04:44 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 9\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":9,"size_decoded":155,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"9e076f5885f5cc16a4b5aeb8de4adff5","sha1":"475c848673a3f79fa778f01c2bd5a721d4c41707","sha256":"e3ebaa16dd9d9b9fc107c42183fb6cf9d22927e1af03dbbdfa0ccc38e4e4ac31","sha512":"4d384838c78c74f56de20de3fe125b9fe4d40b7c9fb5d767b647f05aede6bf63431f4f08ac464e188e77b227becc3ab4ba86272f30b53d91b15003d814e06d2e","ssdeep":"","tlshash":"4a50000c3000030c0000003000c00030000c03000c0000300000c00c000000000000cc","first_seen":"2023-04-05T14:05:15Z","last_seen":"2026-06-29T12:44:31.261603Z","times_seen":9243,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"help.valverestore.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}