Steam moved their Javascript ?

[Leonsbane]

I just noticed that at least all Javascript which is used at the login page has moved from:

https://store.steampowered.com/public/javascript/[xxx].js
to
https://steamstore.map2.ssl.hwcdn.net/public/javascript/[xxx].js

Until now it was enough to whitelist steampowered.com in NoScript.
But now hwcdn.net also needs to be whitelisted.

Is that correct ? Anyone else seeing the same ? ... it kind of confuses me.

EDIT:
Okay i now checked it with my smartphone (Android Stock Browser) and here the Pagesource shows that the Javascript is loaded from:
https://steamstore-a.akamaihd.net/public/javascript/[xxx].js

So maybe they host their Javascript location-based?

[Leonsbane]

Yeah you're right ... seems that hwcdn stands for Highwinds Content Delivery Network ... and it is a Content Hosting Site like Amazon Web Services, Akamaihd and so on ... maybe its to distribute the load and relieve the servers.

Thank you for the hint =) ... i guess that seems legit and i dont have to worry

[Enormous]

Also getting the error in Chrome telling me "steamstore-a.akamaihd.net" is a reported phishing site...

[kudos72]

I'm having the same problem

[Heniek spod monopolowego]

Same here.

[Blu Thundr]

Im scanning my pc w/malwarebytes atm to see if it's any virus/phish, if not then chrome may just not like it.

[Satoru]

I'm not seeing this error in Chrome, but I'm using 31.0.1650.63.m

[Leonsbane]

Also mentioned in:
http://steamcommunity.com/discussions/forum/1/666828126575222473/

[Bad 💀 Motha]

Try updating Chrome to latest version, as well as any plugins u might be using, such as Chrome AdBlock. If you use app/plugin like AdBlock, update the definitions too.

I'm using Chrome v31.0.1650.63m on Win7 and not having any such issues in regards to it warning me that it is a possible phishing site.

[Leonsbane]

Thanks for the suggestion but im not using Chrome ;) ... noticed this with Firefox, IE 10 and with Android Stock Browser.

These Browsers do not warn me or anything ... i myself noticed this because of NoScript

[Bad 💀 Motha]

In Firefox, press ALT key, then click Help and About
That should check for FF updates.

As far as IE, even if u don't use that, u should update it via Windows Updates.

If u want full access to Steam Store in Android, I suggest using the Steam Mobile App Client for that.

[Bad 💀 Motha]

Also if u have Spybot S&D, that might have blacklisted the site, which could be a reason it might have an issue displaying correctly under IE or FF, as it doesn't support Chrome.

[Leonsbane]

The browsers are all up to date, i used IE in a VM just to check the page. I used the Android Browser to rule out any problems with DNS since i was trying it over UMTS.

And as I already said, i get no warnings, i found it by looking into the source of the loginpage since NoScript suddently mentioned that an additional domain has to be whitelisted. Because the login.js needed when the login button called the loginDo function is no longer on steampowered.com but on hwcdn.net and akamaihd.com respectively.

Also i haven't got Spybot S&D since im running ArchLinux =)

But thank you for your help.

[silent2608]

I also have *hwcdn* in my NoScript notification - however ONLY if I am connected through my university's VPN which I accidentally had activated.

[ReBoot]

I would recommend to be less paranoid in general or at least be less paranoid in terms of Steam.
Just allow all Javascript for all Steam domains. Problem solved.

[Slay___]

http://www.highwinds.com/gdn/customers.php -> Valve/Steam
->

Highwinds provides content delivery infrastructure to Valve as part of their global strategy to expand and support Steam, the world's largest online gaming platform. Valve, a long-time Highwinds customer, is experiencing exponential growth with Steam, and the Highwinds GDN is contributing to the platform's global reach and popularity.

Using Chrome, never gotten warning about phishing.
At the moment the store shows me that JS is loaded from:
http://cdn4.store.steampowered.com/public/shared/javascript/