| code.tidio.co/yxixnysbauesaodzwvo8tqaey7upymlg.js | 104.26.8.183 | 302 Found | 134 kB |
URL GET HTTP/2code.tidio.co/yxixnysbauesaodzwvo8tqaey7upymlg.js IP104.26.8.183:443
Requested byhttps://www.steampowered.solutions/ CertificateIssuerGoogle Trust Services LLC Subjecttidio.co Fingerprint61:0E:8C:BE:A0:2C:8F:5E:3E:47:BB:36:BE:3E:FE:1F:F2:7B:68:89 ValiditySat, 16 Mar 2024 23:33:33 GMT - Fri, 14 Jun 2024 23:33:32 GMT
Size134 kB (134020 bytes) Hashf572c011a8835e546dcca5e084cf625b 54acc725fefcefd0f463fb8c400dae08b54a3b19 d10c67eb89e39b0f022ef98099861ff3c542516d5a17b6d97a8e5858c197ee85
GET /yxixnysbauesaodzwvo8tqaey7upymlg.js HTTP/1.1
Host: code.tidio.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.steampowered.solutions/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 27 Apr 2024 03:57:37 GMT
content-type: text/html
location: https://widget-v4.tidiochat.com/1_223_0/static/js/render.ab0ffde36be6aa7a153d.js
cache-control: public, s-maxage=300, max-age=0
widget-cache-status: HIT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8UPyr37uibIu9FSsTi1bKtsOo4b7aiSSGjl2y8cbJLhPWgfTms%2FYbQQsL5Rn1wk%2FnSOSfGZlNVFNeHOyHAdC1l%2FOVB8lKKu%2BVzKCSNau%2By2bqKCnL0JRPDsjsTBFMWs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87abe3b4dd5f56cc-OSL
X-Firefox-Spdy: h2
|
|
| widget-v4.tidiochat.com/fonts/mulish_SGhgqk3wotYKNnBQ.woff2 | 104.26.8.139 | 200 OK | 27 kB |
URL GET HTTP/2widget-v4.tidiochat.com/fonts/mulish_SGhgqk3wotYKNnBQ.woff2 IP104.26.8.139:443
Requested byhttps://www.steampowered.solutions/ CertificateIssuerGoogle Trust Services LLC Subjecttidiochat.com Fingerprint50:D8:D9:FE:35:60:58:DB:17:A7:BC:0A:A6:DD:5D:6C:BF:22:CE:AD ValiditySun, 17 Mar 2024 03:19:43 GMT - Sat, 15 Jun 2024 03:19:42 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 27400, version 1.0 Hashd96e6550e1c6b3063f60875bfd4a0870 c1b22f0d075bd4413686866134fffcccb3f487b8 577db921a554af3596942d3c48b5c91feaac8c767e183d518a8de8de86e5c7d8
GET /fonts/mulish_SGhgqk3wotYKNnBQ.woff2 HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.steampowered.solutions
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Apr 2024 03:57:37 GMT
content-type: font/woff2
content-length: 27400
last-modified: Mon, 22 Apr 2024 07:40:06 GMT
etag: "66261456-6b08"
access-control-allow-origin: *
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XzWKLZTf2oELN%2F9nsvZnvk1glVcDSTecEsnpIS9yJfNzam4CRM7ZeBtiftdKJN6D3OUkoeBjks9Kx6Qmjneq10nZ%2FpT5OWIAtBVqbWmiLQ57VGGNaCVMhJqImzMng6DcrsVrm%2B%2BdwIx1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87abe3b6ba7b7128-OSL
X-Firefox-Spdy: h2
|
|
| www.steampowered.solutions/img/logo_steam.svg | 163.44.242.17 | 200 OK | 3.7 kB |
URL GET HTTP/2www.steampowered.solutions/img/logo_steam.svg IP163.44.242.17:443 ASN#7506 GMO Internet,Inc
Requested byhttps://www.steampowered.solutions/ CertificateIssuerLet's Encrypt Subjectsteampowered.solutions Fingerprint8D:0B:14:9C:3A:C0:7E:CC:2B:CB:A0:45:6A:15:EE:07:60:BD:56:61 ValidityFri, 26 Apr 2024 16:58:28 GMT - Thu, 25 Jul 2024 16:58:27 GMT
File typeSVG Scalable Vector Graphics image Hashb7a7e43284e2ffe806ac1bc27c1f6a87 e8196489e2ae99ec6eb33995b5a3e108d6e44de0 c3a7c646a1305017f22423030cb5a12acc9f96b64013dcef7aeb80567b542cbb
Analyzer | Verdict | Alert | OpenPhish | phishing | Steam |
GET /img/logo_steam.svg HTTP/1.1
Host: www.steampowered.solutions
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.steampowered.solutions/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 20 Mar 2024 08:54:10 GMT
accept-ranges: bytes
content-length: 3684
content-type: image/svg+xml
date: Sat, 27 Apr 2024 03:57:36 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.steampowered.solutions/img/footerLogo_valve.png | 163.44.242.17 | 200 OK | 3.7 kB |
URL GET HTTP/2www.steampowered.solutions/img/footerLogo_valve.png IP163.44.242.17:443 ASN#7506 GMO Internet,Inc
Requested byhttps://www.steampowered.solutions/ CertificateIssuerLet's Encrypt Subjectsteampowered.solutions Fingerprint8D:0B:14:9C:3A:C0:7E:CC:2B:CB:A0:45:6A:15:EE:07:60:BD:56:61 ValidityFri, 26 Apr 2024 16:58:28 GMT - Thu, 25 Jul 2024 16:58:27 GMT
File typePNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced Hash1626f52addb7c56fe3679d82108c62e9 2b414092d66ecff528950093a655f755c3c7f3b5 ae9f6c61e25d15882bf57bde193d10d375bd315c9741cabda11d700fd1bb7dd1
Analyzer | Verdict | Alert | OpenPhish | phishing | Steam |
GET /img/footerLogo_valve.png HTTP/1.1
Host: www.steampowered.solutions
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.steampowered.solutions/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 10 Mar 2024 03:35:16 GMT
accept-ranges: bytes
content-length: 3737
content-type: image/png
date: Sat, 27 Apr 2024 03:57:36 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| widget-v4.tidiochat.com//tururu.mp3 | 104.26.8.139 | 206 Partial Content | 7.2 kB |
URL GET HTTP/2widget-v4.tidiochat.com//tururu.mp3 IP104.26.8.139:443
Requested byhttps://www.steampowered.solutions/ CertificateIssuerGoogle Trust Services LLC Subjecttidiochat.com Fingerprint50:D8:D9:FE:35:60:58:DB:17:A7:BC:0A:A6:DD:5D:6C:BF:22:CE:AD ValiditySun, 17 Mar 2024 03:19:43 GMT - Sat, 15 Jun 2024 03:19:42 GMT
File typeMPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Monaural Hash5061b4d134a7b4d5d744f9a127b757a8 c5e240ac60d3914cb3836ba6652105c67720b845 12c7687514ca85ba2157ed61914ac526bb9dd15cb5a2a2d9e4d88f919349284f
GET //tururu.mp3 HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
date: Sat, 27 Apr 2024 03:57:37 GMT
content-type: audio/mpeg
content-length: 7224
last-modified: Wed, 03 Apr 2024 07:39:35 GMT
etag: "660d07b7-1c38"
expires: Thu, 25 Apr 2024 05:33:23 GMT
cache-control: public, max-age=31536000
pragma: public
cf-cache-status: HIT
age: 1376654
content-range: bytes 0-7223/7224
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M9hyNZ4HjoWC2%2BGMypXBCUgKsaPJXVGsuqbDQJEYam7l0kYhY9%2F%2FeuVFJpkmjThJVEQyq%2FL8o6s75AokMhIGQ7in0sdd1%2FyDt%2BVbLZSpivHRvnJ3t%2BkjHyKhzeEkc7P%2BnZgvaYhciaPk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87abe3b85ae87128-OSL
X-Firefox-Spdy: h2
|
|
| socket.tidio.co/socket.io/?ppk=yxixnysbauesaodzwvo8tqaey7upymlg&device=desktop&EIO=3&transport=websocket | 34.250.113.112 | | 0 B |
URL socket.tidio.co/socket.io/?ppk=yxixnysbauesaodzwvo8tqaey7upymlg&device=desktop&EIO=3&transport=websocket IP34.250.113.112:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?ppk=yxixnysbauesaodzwvo8tqaey7upymlg&device=desktop&EIO=3&transport=websocket HTTP/1.1
Host: socket.tidio.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.steampowered.solutions
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: R8pNqSGSMmr3NG9oA5JvOw==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sat, 27 Apr 2024 03:57:38 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /FsrAbqWe6JebFWa4XyGC98Eqd0=
|
|
| www.steampowered.solutions/ | 163.44.242.17 | 200 OK | 243 B |
URL User Request GET HTTP/2www.steampowered.solutions/ IP163.44.242.17:443 ASN#7506 GMO Internet,Inc
CertificateIssuerLet's Encrypt Subjectsteampowered.solutions Fingerprint8D:0B:14:9C:3A:C0:7E:CC:2B:CB:A0:45:6A:15:EE:07:60:BD:56:61 ValidityFri, 26 Apr 2024 16:58:28 GMT - Thu, 25 Jul 2024 16:58:27 GMT
File typeHTML document, ASCII text Hashbc667d9f6b937c99a9d2bfc128d35e47 6bc2220417a1d374fb2ae8881d7ea31da6611121 e46bc3131fc246caf93a2e3d43ee20d0e7f506a8ced3507c963160f7699413a2
Analyzer | Verdict | Alert | OpenPhish | phishing | Steam |
GET / HTTP/1.1
Host: www.steampowered.solutions
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sat, 27 Apr 2024 03:57:36 GMT
Server: Apache
Location: https://www.steampowered.solutions/
Content-Length: 243
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| steampowered.solutions/img/steamdb.ico | 163.44.242.17 | 200 OK | 4.3 kB |
URL GET HTTP/2steampowered.solutions/img/steamdb.ico IP163.44.242.17:443 ASN#7506 GMO Internet,Inc
Requested byhttps://www.steampowered.solutions/ CertificateIssuerLet's Encrypt Subjectsteampowered.solutions Fingerprint8D:0B:14:9C:3A:C0:7E:CC:2B:CB:A0:45:6A:15:EE:07:60:BD:56:61 ValidityFri, 26 Apr 2024 16:58:28 GMT - Thu, 25 Jul 2024 16:58:27 GMT
File typeMS Windows icon resource - 1 icon, 32x32, 32 bits/pixel Hash5255b8ec0853b81d02451cb374b4b2d6 3c981414586f1ae49eeaa66f2ab60703bbdad9f7 d3a41c8e01b17b5f265bf9c59a5d0f40ba4ca89d701f7245d70a6fbc32d8aa0d
GET /img/steamdb.ico HTTP/1.1
Host: steampowered.solutions
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.steampowered.solutions/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 09 Feb 2024 07:29:12 GMT
accept-ranges: bytes
content-length: 4286
content-type: image/x-icon
date: Sat, 27 Apr 2024 03:57:36 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| widget-v4.tidiochat.com/fonts/mulish_SGhgqk3wotYKNnBQ.woff2 | 104.26.8.139 | 200 OK | 27 kB |
URL GET HTTP/2widget-v4.tidiochat.com/fonts/mulish_SGhgqk3wotYKNnBQ.woff2 IP104.26.8.139:443
Requested byhttps://www.steampowered.solutions/ CertificateIssuerGoogle Trust Services LLC Subjecttidiochat.com Fingerprint50:D8:D9:FE:35:60:58:DB:17:A7:BC:0A:A6:DD:5D:6C:BF:22:CE:AD ValiditySun, 17 Mar 2024 03:19:43 GMT - Sat, 15 Jun 2024 03:19:42 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 27400, version 1.0 Hashd96e6550e1c6b3063f60875bfd4a0870 c1b22f0d075bd4413686866134fffcccb3f487b8 577db921a554af3596942d3c48b5c91feaac8c767e183d518a8de8de86e5c7d8
GET /fonts/mulish_SGhgqk3wotYKNnBQ.woff2 HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.steampowered.solutions
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Apr 2024 03:57:38 GMT
content-type: font/woff2
content-length: 27400
last-modified: Mon, 22 Apr 2024 07:40:06 GMT
etag: "66261456-6b08"
access-control-allow-origin: *
cache-control: max-age=691200
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jIhqdtqwB2%2F0gPYC7wpPs3rKR4FGFCx%2F7mXBwzmG0%2BbF1Bm7WVtns9BdTcePtYfrL3srVPX5R19ryTVlTCStZ6HU2wRhQ1i2wNliDCK%2BTvyCKEHzkeZEQSxKHGWFlfGL%2BP0n1o1EP%2B%2Bj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87abe3bbdbd77128-OSL
X-Firefox-Spdy: h2
|
|
| widget-v4.tidiochat.com/fonts/mulish_SGhgqk3wotYKNnBQ.woff2 | 104.26.8.139 | 200 OK | 27 kB |
URL GET HTTP/2widget-v4.tidiochat.com/fonts/mulish_SGhgqk3wotYKNnBQ.woff2 IP104.26.8.139:443
Requested byhttps://www.steampowered.solutions/ CertificateIssuerGoogle Trust Services LLC Subjecttidiochat.com Fingerprint50:D8:D9:FE:35:60:58:DB:17:A7:BC:0A:A6:DD:5D:6C:BF:22:CE:AD ValiditySun, 17 Mar 2024 03:19:43 GMT - Sat, 15 Jun 2024 03:19:42 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 27400, version 1.0 Hashd96e6550e1c6b3063f60875bfd4a0870 c1b22f0d075bd4413686866134fffcccb3f487b8 577db921a554af3596942d3c48b5c91feaac8c767e183d518a8de8de86e5c7d8
GET /fonts/mulish_SGhgqk3wotYKNnBQ.woff2 HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.steampowered.solutions
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Apr 2024 03:57:39 GMT
content-type: font/woff2
content-length: 27400
last-modified: Mon, 22 Apr 2024 07:40:06 GMT
etag: "66261456-6b08"
access-control-allow-origin: *
cache-control: max-age=691200
cf-cache-status: HIT
age: 2
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VaHCjGD%2FCHp5BYg2nRV5s8%2Br0lUxuRNFU8B63M9KAWoGrcdrtHL%2F6rSjV2pFqCnOWiyReIxfiDv33YNoxCcHz2LdwCMAfLueC0nOWsd9N6q1H1k%2FDprM1VMldx4MRxa8fDDMYmQd1J92"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87abe3c1cdb07128-OSL
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/twemoji/12.1.1/72x72/1f44b.png | 104.17.25.14 | | 1.2 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/twemoji/12.1.1/72x72/1f44b.png IP104.17.25.14:0
Requested byhttps://www.steampowered.solutions/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit colormap, non-interlaced Hash8c685a701d36f492ecc566a4c879fbfd bbfb15f5fdfd47a20122556975dba73b9d035d95 dfee1561c6e59c90f7a292f90157bae85f75ccb3ae27b655898a51429e3a8910
GET /ajax/libs/twemoji/12.1.1/72x72/1f44b.png HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.steampowered.solutions/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 03:57:39 GMT
content-type: image/png; charset=utf-8
content-length: 1224
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5fdd6306-505"
last-modified: Sat, 19 Dec 2020 02:18:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 196624
expires: Thu, 17 Apr 2025 03:57:39 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MHECD0n6Q7zvviYgG6o%2F2hbsxvbfbr1CyPBtYocgSUEfd48MFiFfl%2FvzGryvgP7FPs2kie59pcDAHldinL4HT96nukrcqGGVGqTea6G4VajdydqDL2T%2Fh0hSQdwSgG4eFNSoxS4Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87abe3c21c51b50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.steampowered.solutions/ | 163.44.242.17 | 200 OK | 32 kB |
URL User Request GET HTTP/2www.steampowered.solutions/ IP163.44.242.17:443 ASN#7506 GMO Internet,Inc
CertificateIssuerLet's Encrypt Subjectsteampowered.solutions Fingerprint8D:0B:14:9C:3A:C0:7E:CC:2B:CB:A0:45:6A:15:EE:07:60:BD:56:61 ValidityFri, 26 Apr 2024 16:58:28 GMT - Thu, 25 Jul 2024 16:58:27 GMT
Hash0eb7336a1df5690e1b6b8cded62915d0 f0112447d9b99a950bb1ffe8315c3afe74905bf0 f76df2f555b7359bd7523790aef67810a30af8081c5caa0ea9862b0db0d916cd
Analyzer | Verdict | Alert | OpenPhish | phishing | Steam |
GET / HTTP/1.1
Host: www.steampowered.solutions
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: PHP/8.0.30
content-type: text/html; charset=UTF-8
date: Sat, 27 Apr 2024 03:57:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| socket.tidio.co/socket.io/?ppk=yxixnysbauesaodzwvo8tqaey7upymlg&device=desktop&EIO=3&transport=websocket | 34.250.113.112 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1socket.tidio.co/socket.io/?ppk=yxixnysbauesaodzwvo8tqaey7upymlg&device=desktop&EIO=3&transport=websocket IP34.250.113.112:443
Requested byhttps://www.steampowered.solutions/ CertificateIssuerAmazon Subjecttidio.co Fingerprint98:9E:BA:DC:FE:5D:11:F4:A3:32:E0:6C:3C:07:32:AA:D4:ED:7F:03 ValidityMon, 19 Feb 2024 00:00:00 GMT - Thu, 20 Mar 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?ppk=yxixnysbauesaodzwvo8tqaey7upymlg&device=desktop&EIO=3&transport=websocket HTTP/1.1
Host: socket.tidio.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.steampowered.solutions
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: R8pNqSGSMmr3NG9oA5JvOw==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sat, 27 Apr 2024 03:57:38 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /FsrAbqWe6JebFWa4XyGC98Eqd0=
|
|
| widget-v4.tidiochat.com/1_223_0/static/js/chunk-WidgetIframe-ab0ffde36be6aa7a153d.js | 104.26.8.139 | 200 OK | 489 kB |
URL GET HTTP/2widget-v4.tidiochat.com/1_223_0/static/js/chunk-WidgetIframe-ab0ffde36be6aa7a153d.js IP104.26.8.139:443
Requested byhttps://www.steampowered.solutions/ CertificateIssuerGoogle Trust Services LLC Subjecttidiochat.com Fingerprint50:D8:D9:FE:35:60:58:DB:17:A7:BC:0A:A6:DD:5D:6C:BF:22:CE:AD ValiditySun, 17 Mar 2024 03:19:43 GMT - Sat, 15 Jun 2024 03:19:42 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size489 kB (488873 bytes) Hash7fa608633b72035d3cd311e9b2da2463 0aa843c5ea71d4143c92109acfc5b5cc18afea82 5262e3f73f35616febd13fbe6feee14613d076774ff644e48489f7cd6694a8dc
GET /1_223_0/static/js/chunk-WidgetIframe-ab0ffde36be6aa7a153d.js HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 03:57:37 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 07:40:11 GMT
vary: Accept-Encoding
etag: W/"6626145b-775a9"
cache-control: max-age=691200
cf-cache-status: HIT
age: 722
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gVtaiEVXMLoFixMw8D2pRqC1rOswQTOmoL0g5pnJVl3I67hVZzb6NO2mau5%2BkY3PnQ6ErD4eWmwIaXXF3eS69Xc4fb6DX3iuZVxe%2BkEdHX6s0u21jzcV48bE0OQyszqiicmRklUW1OUj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87abe3b6ba797128-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| widget-v4.tidiochat.com/1_223_0/static/js/chunk-WidgetIframe-ab0ffde36be6aa7a153d.js | 104.26.8.139 | 200 OK | 489 kB |
URL GET HTTP/2widget-v4.tidiochat.com/1_223_0/static/js/chunk-WidgetIframe-ab0ffde36be6aa7a153d.js IP104.26.8.139:443
Requested byhttps://www.steampowered.solutions/ CertificateIssuerGoogle Trust Services LLC Subjecttidiochat.com Fingerprint50:D8:D9:FE:35:60:58:DB:17:A7:BC:0A:A6:DD:5D:6C:BF:22:CE:AD ValiditySun, 17 Mar 2024 03:19:43 GMT - Sat, 15 Jun 2024 03:19:42 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size489 kB (488873 bytes) Hash7fa608633b72035d3cd311e9b2da2463 0aa843c5ea71d4143c92109acfc5b5cc18afea82 5262e3f73f35616febd13fbe6feee14613d076774ff644e48489f7cd6694a8dc
GET /1_223_0/static/js/chunk-WidgetIframe-ab0ffde36be6aa7a153d.js HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 03:57:38 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 07:40:11 GMT
vary: Accept-Encoding
etag: W/"6626145b-775a9"
cache-control: max-age=691200
cf-cache-status: HIT
age: 723
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pp1M3EBQjD%2F55jzNN%2F9ZrWQV09W%2BNxgDxk6erJ7%2FkEBYl3K%2FLyiO4aeXITLSrbqbMEVv5lW%2FVwj29HPwb7d0uBCu2QMYn7KDy867OvvPoBUhFPMEY7nAxu5xBunWfCp9YS2uCxRs6EIw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87abe3ba6b6a7128-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| widget-v4.tidiochat.com/1_223_0/static/js/render.ab0ffde36be6aa7a153d.js | 104.26.8.139 | 200 OK | 5.2 kB |
URL GET HTTP/2widget-v4.tidiochat.com/1_223_0/static/js/render.ab0ffde36be6aa7a153d.js IP104.26.8.139:443
Requested byhttps://www.steampowered.solutions/ CertificateIssuerGoogle Trust Services LLC Subjecttidiochat.com Fingerprint50:D8:D9:FE:35:60:58:DB:17:A7:BC:0A:A6:DD:5D:6C:BF:22:CE:AD ValiditySun, 17 Mar 2024 03:19:43 GMT - Sat, 15 Jun 2024 03:19:42 GMT
File typeJavaScript source, ASCII text, with very long lines (5371), with no line terminators Hash35f3cacc7e8353851f1319f97fec4a71 83dedb443f33dd2c3349157b1c493cd51b1b3bf3 48d9f0b1c9668fc80788ea3263a765724dee18c29fba8bc713016781bfe42180
GET /1_223_0/static/js/render.ab0ffde36be6aa7a153d.js HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.steampowered.solutions/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 03:57:37 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 07:40:11 GMT
vary: Accept-Encoding
etag: W/"6626145b-1472"
cache-control: max-age=691200
cf-cache-status: HIT
age: 855
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dQ9iolTfIvehYYcXXIllZNCsLyXkmaWaja3Ny0LB%2B8OZ0D2Ee5j2FvzEDEdJr%2B9jzWSR7ON%2F9Yj%2FZkAGdSVUQGu9y5bFgwrCq8mHMdytlVtQu0%2BcWofsqQBYc7ue7x9Q5LKWPQKRCKPD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87abe3b5ea397128-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| widget-v4.tidiochat.com/1_223_0/static/js/widget.ab0ffde36be6aa7a153d.js | 104.26.8.139 | 200 OK | 505 kB |
URL GET HTTP/2widget-v4.tidiochat.com/1_223_0/static/js/widget.ab0ffde36be6aa7a153d.js IP104.26.8.139:443
Requested byhttps://www.steampowered.solutions/ CertificateIssuerGoogle Trust Services LLC Subjecttidiochat.com Fingerprint50:D8:D9:FE:35:60:58:DB:17:A7:BC:0A:A6:DD:5D:6C:BF:22:CE:AD ValiditySun, 17 Mar 2024 03:19:43 GMT - Sat, 15 Jun 2024 03:19:42 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size505 kB (505137 bytes) Hash04e4f17e19865c645f118d7cbea33cb3 d4860056288ca338de22f67f84d5457cf36fc3a5 69db969f017b237bf909e05cfc9a8b5fac05a5363f17888651bafb818a7e651c
GET /1_223_0/static/js/widget.ab0ffde36be6aa7a153d.js HTTP/1.1
Host: widget-v4.tidiochat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 03:57:37 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 07:40:11 GMT
vary: Accept-Encoding
etag: W/"6626145b-7b531"
cache-control: max-age=691200
cf-cache-status: HIT
age: 721
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xkFDC90UzZA7urzki4bXQAE443YT8BYr%2BY74xetVRx6Mp1kzQJQtqjoO0nb0hcLRWdLUntHYeab656UT%2FPP1AaptPYSiHPFfsaCeR6RHDIY%2B33fkqoSuDkyQWeSHaPGR6E387%2F7Jw1VV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87abe3b76ab87128-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|