VAC checked for the presence of these cheats. If they were detected VAC then checked to see which cheat DRM server was being contacted. This second check was do

VAC checked for the presence of these cheats. If they were detected VAC then checked to see which cheat DRM server was being contacted. This second check was done by looking for a partial match to those (non-web) cheat DRM servers in the DNS cache. If found, then hashes of the matching DNS entries were sent to the VAC servers. Sounds like first the cheat process needed to be detected on your system, then the DNS cache would be checked. On the surface it sounded like a privacy issue but with these extra details I am having trouble seeing an issue.