| st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case |  210.74.226.205 | 200 | 8.4 kB |
URL User Request GET HTTP/1.1st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case IP210.74.226.205:443 ASN#4812 China Telecom Group
CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (466), with CRLF, LF line terminators Hashaed8eeb9ce10ace7e81bf7bd6c42ca4b 07bfd58e9876843dd9483d885afb4b2cd9fab49f 461059240debf5da0c83c849b9d5f12ef60389b70ccb59ade01cdbf03208b0a3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /market/listings/730/dreams%20&%20nightmares%20case HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:32 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 8400
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Method: *
Access-Control-Allow-Methods: POST, GET, HEAD, OPTIONS
Access-Control-Allow-Origin: https://st.aircsgo.com
Access-Control-Expose-Headers: X-eresult,X-error_message
Cache-Control: no-cache
Content-Encoding: gzip
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Origin: https://st.aircsgo.com
Set-Cookie: sessionid=2681880e36c961234f0a009e; Path=/; Secure; SameSite=None;Domain=st.aircsgo.com
steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; Path=/; Secure; HttpOnly; SameSite=None;Domain=st.aircsgo.com
uid=4496d495-673e-4e75-9b52-62dfc3276d1a; Path=/; Domain=st.aircsgo.com
Vary: Accept-Encoding
X-Frame-Options: DENY
X-Proxy-Hostname: steam-session-cluster-6c6fc676d6-mh7h2
traceId: eaac1cf3b017141913917071553d0001
|
|
| community.cloudflare.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png |  172.64.145.151 | 200 OK | 3.8 kB |
URL GET HTTP/2community.cloudflare.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png IP172.64.145.151:443
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerLet's Encrypt Subjectcloudflare.steamstatic.com Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35 ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT
File typePNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced Hasheabc76eb57feae44add7faead028521e 4e3e53938fad15661d2d046a868338841a95db19 fc9e6260a2706ae146282d77e67bc1b74688435f8912ab4c1932641eec28bffa
GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:16:32 GMT
content-type: image/png
content-length: 3777
last-modified: Fri, 05 Jan 2018 01:35:16 GMT
etag: "5a4ed654-ec1"
x-cache: MISS
cf-cache-status: HIT
age: 6569
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87abff6bbe95568e-OSL
X-Firefox-Spdy: h2
|
|
| community.cloudflare.steamstatic.com/public/images/x9x9.gif | 172.64.145.151 | 200 OK | 58 B |
URL GET HTTP/2community.cloudflare.steamstatic.com/public/images/x9x9.gif IP172.64.145.151:443
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerLet's Encrypt Subjectcloudflare.steamstatic.com Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35 ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT
File typeGIF image data, version 89a, 9 x 9 Hashc85b970b4c832e361445c1b446cc2343 57e60c2f1f1f919a871b7c171c6d59d42e3adbe5 5ce28d7cf05f0e6eeaa3788a393d9980e9b51130963c6b9672d3447b6b11de6d
GET /public/images/x9x9.gif HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:16:32 GMT
content-type: image/gif
content-length: 58
last-modified: Fri, 05 Jan 2018 01:34:51 GMT
etag: "5a4ed63b-3a"
access-control-allow-origin: *
x-cache: MISS
cf-cache-status: HIT
age: 6458
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87abff6bbe98568e-OSL
X-Firefox-Spdy: h2
|
|
| community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png | 172.64.145.151 | 200 OK | 11 kB |
URL GET HTTP/2community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png IP172.64.145.151:443
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerLet's Encrypt Subjectcloudflare.steamstatic.com Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35 ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT
File typePNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced Hasha4e79c73ee13cb25b60fc4b0ba1f690c b690c31b2eb1b0eb085e91aaae7e79f03debe7c1 6cb869df089146c12efb5e9c968e911c314842624ba6f052a11346ac734cadc8
GET /public/shared/images/responsive/header_logo.png HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:16:32 GMT
content-type: image/png
content-length: 10863
last-modified: Fri, 05 Jan 2018 01:35:16 GMT
etag: "5a4ed654-2a6f"
x-cache: MISS
cf-cache-status: HIT
age: 6569
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87abff6bbe9a568e-OSL
X-Firefox-Spdy: h2
|
|
| community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png | 172.64.145.151 | 200 OK | 1.8 kB |
URL GET HTTP/2community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png IP172.64.145.151:443
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerLet's Encrypt Subjectcloudflare.steamstatic.com Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35 ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT
File typePNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced Hash574c350c7b23ae794d5276f8580e0838 235c7b35c3468f8915eca01f7abdb43d34079609 8b97ba0dac22fe6704c1f6d95fe79613f33017804f256abb9006df0442491787
GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:16:32 GMT
content-type: image/png
content-length: 1846
last-modified: Fri, 05 Jan 2018 01:35:16 GMT
etag: "5a4ed654-736"
x-cache: MISS
cf-cache-status: HIT
age: 6569
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87abff6bbe96568e-OSL
X-Firefox-Spdy: h2
|
|
| community.cloudflare.steamstatic.com/public/images/skin_1/ico_external_link.gif | 172.64.145.151 | 200 OK | 63 B |
URL GET HTTP/2community.cloudflare.steamstatic.com/public/images/skin_1/ico_external_link.gif IP172.64.145.151:443
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerLet's Encrypt Subjectcloudflare.steamstatic.com Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35 ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT
File typeGIF image data, version 89a, 8 x 8 Hashd1c5aa274c0f681d02317d33026e93d2 07ce7ddd50b6c56dc35a08128a161cdd78c08be4 563401248387cb3cf47d04e1dda78508467889ce4ebb80d24a074e0c24a0183c
GET /public/images/skin_1/ico_external_link.gif HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:16:32 GMT
content-type: image/gif
content-length: 63
last-modified: Fri, 05 Jan 2018 01:34:51 GMT
etag: "5a4ed63b-3f"
access-control-allow-origin: *
x-cache: MISS
cf-cache-status: HIT
age: 5075
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87abff6bbe99568e-OSL
X-Firefox-Spdy: h2
|
|
| community.cloudflare.steamstatic.com/public/images/trans.gif | 172.64.145.151 | 200 OK | 43 B |
URL GET HTTP/2community.cloudflare.steamstatic.com/public/images/trans.gif IP172.64.145.151:443
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerLet's Encrypt Subjectcloudflare.steamstatic.com Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35 ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT
File typeGIF image data, version 89a, 1 x 1 Hash325472601571f31e1bf00674c368d335 2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /public/images/trans.gif HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:16:32 GMT
content-type: image/gif
content-length: 43
last-modified: Fri, 05 Jan 2018 01:34:51 GMT
etag: "5a4ed63b-2b"
access-control-allow-origin: *
x-cache: MISS
cf-cache-status: HIT
age: 5521
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87abff6bbe9f568e-OSL
X-Firefox-Spdy: h2
|
|
| community.cloudflare.steamstatic.com/public/images/login/throbber.gif | 172.64.145.151 | 200 OK | 3.2 kB |
URL GET HTTP/2community.cloudflare.steamstatic.com/public/images/login/throbber.gif IP172.64.145.151:443
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerLet's Encrypt Subjectcloudflare.steamstatic.com Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35 ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT
File typeGIF image data, version 89a, 32 x 32 Hash928e54c4c9683d8dd32867ee992d73c4 83b3252952e1e8c98deb5e6eb64e150c594dd97b 0c4d1b66cbed8c0ba7bfe1d047409e80b99684794ba66e9556503890eae17f2d
GET /public/images/login/throbber.gif HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:16:32 GMT
content-type: image/gif
content-length: 3208
last-modified: Fri, 05 Jan 2018 01:34:49 GMT
etag: "5a4ed639-c88"
access-control-allow-origin: *
x-cache: MISS
cf-cache-status: HIT
age: 6055
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87abff6bbe9d568e-OSL
X-Firefox-Spdy: h2
|
|
| community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1 | 172.64.145.151 | 200 OK | 3.7 kB |
URL GET HTTP/2community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1 IP172.64.145.151:443
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerLet's Encrypt Subjectcloudflare.steamstatic.com Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35 ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT
File typePNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced Hash1626f52addb7c56fe3679d82108c62e9 2b414092d66ecff528950093a655f755c3c7f3b5 ae9f6c61e25d15882bf57bde193d10d375bd315c9741cabda11d700fd1bb7dd1
GET /public/images/skin_1/footerLogo_valve.png?v=1 HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:16:32 GMT
content-type: image/png
content-length: 3737
last-modified: Fri, 05 Jan 2018 01:34:51 GMT
etag: "5a4ed63b-e99"
access-control-allow-origin: *
x-cache: MISS
cf-cache-status: HIT
age: 6960
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87abff6bbea1568e-OSL
X-Firefox-Spdy: h2
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l=english&_cdn=cloudflare | 210.74.226.205 | 200 | 2.7 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l=english&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash19f4a36c629c358690fc93dbd234d105 6bbc819e64172d57a4abdaa20c8e2b8a32dd662c e753a6b743187c7d592e6e2d3580336751e6211cd228ad7410e02db29ec91ad8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:32 GMT
Content-Type: text/css;charset=UTF-8
Content-Length: 2718
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "GfSjbGKcNYaQ"
Cache-Control: public,max-age=15552000
Expires: Sat, 31 Aug 2024 20:15:10 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 4044906
Vary: Accept-Encoding
CF-RAY: 87764a062ad920f6-HKG
Content-Disposition: inline;filename=f.txt
traceId: eaac1cf3b017136282172972155d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/globalv2.css?v=pwVcIAtHNXwg&l=english&_cdn=cloudflare | 210.74.226.205 | 200 | 40 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/globalv2.css?v=pwVcIAtHNXwg&l=english&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeASCII text, with very long lines (4009), with CRLF, LF line terminators Hasha7055c200b47357c2051179f9b979bbd 701f861353694ceb6a41a867ac2e118a76400cdc f553f59191af4f2b222a73d129b731d4f461c84a67d55cf8e29ba319fe13b078
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/css/globalv2.css?v=pwVcIAtHNXwg&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:32 GMT
Content-Type: text/css;charset=UTF-8
Content-Length: 39590
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "pwVcIAtHNXwg"
Cache-Control: public,max-age=15552000
Expires: Sun, 22 Sep 2024 22:52:20 GMT
X-Cache: HIT
CF-Cache-Status: HIT
Age: 2134675
Vary: Accept-Encoding
CF-RAY: 87764a0a6fde04dd-HKG
Content-Disposition: inline;filename=f.txt
traceId: eaac1cf3ae17136282179802104d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/skin_1/html5.css?v=.MtSlvoLZL0Tb&_cdn=cloudflare | 210.74.226.205 | 200 | 103 B |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/skin_1/html5.css?v=.MtSlvoLZL0Tb&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hashc1765d53f2b20ec658e1a4d47cf2b3d5 066b2c3914ea6f732dd762148a27604a14c670a2 615d10da6de57307bd0c1870095b2eef25450fd3f48ae2a42502cf2cf0fa57d7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/css/skin_1/html5.css?v=.MtSlvoLZL0Tb&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:33 GMT
Content-Type: text/css;charset=UTF-8
Content-Length: 103
Connection: keep-alive
Last-Modified: Fri, 05 Jan 2018 01:34:47 GMT
ETag: ".MtSlvoLZL0Tb"
Cache-Control: public,max-age=15552000
Expires: Sat, 31 Aug 2024 18:53:00 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 4276302
Vary: Accept-Encoding
CF-RAY: 878f026129ab1108-HKG
Content-Disposition: inline;filename=f.txt
traceId: eaac1cf3ae17138874267371690d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/skin_1/economy.css?v=Hib2Mv7hYJ4z&l=english&_cdn=cloudflare | 210.74.226.205 | 200 | 29 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/skin_1/economy.css?v=Hib2Mv7hYJ4z&l=english&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeASCII text, with very long lines (633), with CRLF, LF line terminators Hash1e26f632fee1609e336d9cb8d5cbea0d e9f4a7ca76c5ad93d96aa2769bb49cd387071fd2 0a3dd4d637fb4f61e7fd4832e4b280d802cddf5712383b194dc66f293dc4df90
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/css/skin_1/economy.css?v=Hib2Mv7hYJ4z&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:33 GMT
Content-Type: text/css;charset=UTF-8
Content-Length: 29260
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "Hib2Mv7hYJ4z"
Cache-Control: public,max-age=15552000
Expires: Fri, 11 Oct 2024 17:34:55 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 574423
Vary: Accept-Encoding
CF-RAY: 87971104098f04d2-HKG
Content-Disposition: inline;filename=f.txt
traceId: eaac1cf3af17139719123203925d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/skin_1/header.css?v=vh4BMeDcNiCU&l=english&_cdn=cloudflare | 210.74.226.205 | 200 | 13 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/skin_1/header.css?v=vh4BMeDcNiCU&l=english&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeASCII text, with very long lines (629), with CRLF line terminators Hashbe1e0131e0dc3620948b14da818b1a4d 810b4aff56a0e76cf870cc67e3092447b46dcd92 ebd518bec6383218452cc4597aeff5debc82b1f76cbea1950c5ecbfd59c5e3e5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/css/skin_1/header.css?v=vh4BMeDcNiCU&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:33 GMT
Content-Type: text/css;charset=UTF-8
Content-Length: 12804
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "vh4BMeDcNiCU"
Cache-Control: public,max-age=15552000
Expires: Sat, 31 Aug 2024 21:23:19 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 4040819
Vary: Accept-Encoding
CF-RAY: 87764a11dbc5b472-HKG
Content-Disposition: inline;filename=f.txt
traceId: eaac1cf3ad17136282191674625d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/buttons.css?v=tuNiaSwXwcYT&l=english&_cdn=cloudflare | 210.74.226.205 | 200 | 34 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/buttons.css?v=tuNiaSwXwcYT&l=english&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeASCII text, with CRLF, LF line terminators Hashb6e362692c17c1c613dfc67197952242 fed8f68cdfdd8bf5c29fb0ebd418f796bc8af2dd 151dc1c5196a4ca683f292ae77fa5321f750c495a5c4ffd4888959eb46d9cdc1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/shared/css/buttons.css?v=tuNiaSwXwcYT&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:33 GMT
Content-Type: text/css;charset=UTF-8
Content-Length: 33770
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "tuNiaSwXwcYT"
Cache-Control: public,max-age=15552000
Expires: Sat, 31 Aug 2024 14:45:02 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 4044908
Vary: Accept-Encoding
CF-RAY: 87764a0ad87a04dd-HKG
Content-Disposition: inline;filename=f.txt
traceId: eaac1cf3ae17136282180502105d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&l=english&_cdn=cloudflare | 210.74.226.205 | 200 | 19 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&l=english&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeASCII text, with very long lines (1667), with CRLF, LF line terminators Hash7a0867f43372098ebbb7948a57e75bc9 6f53ff787f5c1b99a73cc8a3bedae946944771b3 1888d4455d4bbb2b8a15e8834498bc0ac62ec941c6edc29859a5fdcdd5c1f602
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:33 GMT
Content-Type: text/css;charset=UTF-8
Content-Length: 19100
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "eghn9DNyCY67"
Cache-Control: public,max-age=15552000
Expires: Sun, 20 Oct 2024 23:31:05 GMT
X-Cache: HIT
CF-Cache-Status: HIT
Age: 77
Vary: Accept-Encoding
CF-RAY: 8791a792ad690ed0-HKG
Content-Disposition: inline;filename=f.txt
traceId: eaac1cf3ac17139151645823565d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/skin_1/economy_market.css?v=dSVwlaD8QGyW&l=english&_cdn=cloudflare | 210.74.226.205 | 200 | 54 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/skin_1/economy_market.css?v=dSVwlaD8QGyW&l=english&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeASCII text, with very long lines (666), with CRLF, LF line terminators Hash75257095a0fc406c966bf986b37299aa 453800be927a86c4446d352e7403144ffe734dcb 8a458b0672d09affd716caca665750633d825ba8b46466a4d8c9c105955b056f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/css/skin_1/economy_market.css?v=dSVwlaD8QGyW&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:33 GMT
Content-Type: text/css;charset=UTF-8
Content-Length: 54106
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "dSVwlaD8QGyW"
Cache-Control: public,max-age=15552000
Expires: Fri, 06 Sep 2024 10:16:35 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 3906118
Vary: Accept-Encoding
CF-RAY: 87971108592d84a5-HKG
Content-Disposition: inline;filename=f.txt
traceId: eaac1cf3ad17139719130056443d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/shared_global.css?v=2VoZa2M8Wh3k&l=english&_cdn=cloudflare | 210.74.226.205 | 200 | 88 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/shared_global.css?v=2VoZa2M8Wh3k&l=english&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeASCII text, with very long lines (1819), with CRLF, LF line terminators Hashd95a196b633c5a1de4bfe531abe19544 b4d3e3d225c8f699d2c5661b194e6feadd9b5807 8a0e6fb8b50e1da206a13969ee4f1f904f0b0a430fd6455a10fc7829b6776ae4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/shared/css/shared_global.css?v=2VoZa2M8Wh3k&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:33 GMT
Content-Type: text/css;charset=UTF-8
Content-Length: 87472
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "2VoZa2M8Wh3k"
Cache-Control: public,max-age=15552000
Expires: Sun, 06 Oct 2024 22:37:45 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 925952
Vary: Accept-Encoding
CF-RAY: 87764a09f8ac20f6-HKG
Content-Disposition: inline;filename=f.txt
traceId: eaac1cf3b017136282179142158d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare | 210.74.226.205 | 200 | 16 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash72938851e7c2ef7b63299eba0c6752cb b75196bd3a6f9f4dfc1bbf5e43e96874bcd9ce4e e2d4e0e1d3e162fdc815f16dfff9ae9b0a967949f0f3ae371f947d730a3f0661
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:35 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 16087
Connection: keep-alive
Last-Modified: Tue, 22 Mar 2022 23:23:42 GMT
ETag: ".zYHOpI1L3Rt0"
Cache-Control: public,max-age=15552000
Expires: Sat, 31 Aug 2024 23:00:36 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 4034985
Vary: Accept-Encoding
CF-RAY: 87764a1e3da45def-HKG
Content-Disposition: inline;filename=f.txt
traceId: 5e974593-cdaf-4639-89f3-182f40707082
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/global.js?v=PyuRtGtUpR0t&l=english&_cdn=cloudflare | 210.74.226.205 | 200 | 104 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/global.js?v=PyuRtGtUpR0t&l=english&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeASCII text, with very long lines (9521), with CRLF line terminators Size104 kB (103600 bytes) Hash0c978858633fdb2c6e1d63ed21f7131b d9bf7680b8efcd58242a9fb1fbdff175b20362c1 47c2fe5dd6592780e7474b1a99346c2efedf966e7981c4468c38e71273e5726b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/javascript/global.js?v=PyuRtGtUpR0t&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:34 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 103600
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "PyuRtGtUpR0t"
Cache-Control: public,max-age=15552000
Expires: Sun, 22 Sep 2024 22:52:20 GMT
X-Cache: HIT
CF-Cache-Status: HIT
Age: 2134677
Vary: Accept-Encoding
CF-RAY: 87764a14ae0f5def-HKG
Content-Disposition: inline;filename=f.txt
traceId: e06606f7-b781-450d-a1ed-fdc5358ee63e
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/economy_common.js?v=tsXdRVB0yEaR&l=english&_cdn=cloudflare | 210.74.226.205 | 200 | 5.7 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/economy_common.js?v=tsXdRVB0yEaR&l=english&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hashb6c5dd455074c8469138dbd7a9653c9d 602d11ab301526d333dc1a05e2492bab6753a296 a3b6f1dafe9b802dc14a7d8a843cf754e7f26351b96d52c0d759cf4ce2ad13ea
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/javascript/economy_common.js?v=tsXdRVB0yEaR&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:35 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 5654
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "tsXdRVB0yEaR"
Cache-Control: public,max-age=15552000
Expires: Sat, 31 Aug 2024 21:28:38 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 4384195
Vary: Accept-Encoding
CF-RAY: 87971109bfa99b42-HKG
Content-Disposition: inline;filename=f.txt
traceId: 1d5e5667-6f35-49bd-bfdf-22d1a3b2d87a
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&_cdn=cloudflare | 210.74.226.205 | 200 | 96 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32086), with CRLF line terminators Hash4dc834d16a0d219d5c2b8a5b814569e4 4fbe0563917d6f6289e4e1b4a0a8758e4e43bda9 91222f96f34735ebc88df208017e54d4329b9202e3e52367fb8b149698a1a5ef
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:34 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 95790
Connection: keep-alive
Last-Modified: Fri, 05 Jan 2018 01:34:51 GMT
ETag: ".isFTSRckeNhC"
Cache-Control: public,max-age=15552000
Expires: Sat, 31 Aug 2024 21:24:48 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 4040731
Vary: Accept-Encoding
CF-RAY: 87764a15caa65096-HKG
Content-Disposition: inline;filename=f.txt
traceId: fb7c5821-1023-427b-a22e-917167e56223
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&_cdn=cloudflare&load=effects,controls,slider,dragdrop | 210.74.226.205 | 200 | 122 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&_cdn=cloudflare&load=effects,controls,slider,dragdrop IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Size122 kB (122171 bytes) Hash39e34882ba4417cb4b1b84916dabb770 0d0ca081fb60c8aad337091bafcbe84f966c38b0 da708635da162ea493874627775c3520a42145b79c73bf787b5113bf87c0b27c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&_cdn=cloudflare&load=effects,controls,slider,dragdrop HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:34 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 122171
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "OeNIgrpEF8tL"
Cache-Control: public,max-age=15552000
Expires: Mon, 09 Sep 2024 14:56:44 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 3275574
Vary: Accept-Encoding
CF-RAY: 87764a144f06b472-HKG
Content-Disposition: inline;filename=f.txt
traceId: 7d2cc382-63d1-4aac-a661-a2f4e7e1a888
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english&_cdn=cloudflare | 210.74.226.205 | 200 | 3.9 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash75f321bb2f8bae9ca8e5c4c6d72521bd 8ed540dc9da8c5d7c2bbe390fc663e6de0b1ef0c 92a217685eda5e8319d193142aeadf80ae7a9c9e04a9a365d9cf01078d459985
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:35 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 3869
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "dfMhuy-Lrpyo"
Cache-Control: public,max-age=15552000
Expires: Sat, 31 Aug 2024 21:23:30 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 4040810
Vary: Accept-Encoding
CF-RAY: 87764a1ad8a65def-HKG
Content-Disposition: inline;filename=f.txt
traceId: ee6a23cf-76c7-476d-a206-451d37469959
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/jqplot/plugins/jqplot.cursor.min.js?v=.M2KHp3--unVY&_cdn=cloudflare | 210.74.226.205 | 200 | 19 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/jqplot/plugins/jqplot.cursor.min.js?v=.M2KHp3--unVY&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (18662), with CRLF line terminators Hash12d520761e6330bb563556075012d836 4f2fbd14d23ba43f3c4407a5349d9ee8cb1aa9b0 fbcd866e51b35ec80b1cfa008e611838d6ce872020fa7ff32bbc082c5c61923b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/javascript/jqplot/plugins/jqplot.cursor.min.js?v=.M2KHp3--unVY&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:36 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 18771
Connection: keep-alive
Last-Modified: Fri, 05 Jan 2018 01:34:51 GMT
ETag: ".M2KHp3--unVY"
Cache-Control: public,max-age=15552000
Expires: Mon, 09 Sep 2024 18:16:28 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 3572343
Vary: Accept-Encoding
CF-RAY: 879742545fa9098d-HKG
Content-Disposition: inline;filename=f.txt
traceId: 842c5565-02bf-405f-8b70-394b2a958de7
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&_cdn=cloudflare | 210.74.226.205 | 200 | 169 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Size169 kB (169399 bytes) Hash6a39e0b509fecb928d47b8a2643fed2a f67fa6cb1d09963d10ba117d6553c8e7d5bc7863 d8bdea7fff893dbdbeaf6c2affec091a77483b9ec10e7958486bc3b6cc170c96
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:33 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 169399
Connection: keep-alive
Last-Modified: Fri, 05 Jan 2018 01:34:51 GMT
ETag: ".55t44gwuwgvw"
Cache-Control: public,max-age=15552000
Expires: Sat, 31 Aug 2024 14:35:53 GMT
X-Cache: HIT
CF-Cache-Status: HIT
Age: 4051107
Vary: Accept-Encoding
CF-RAY: 87764a168c1020f6-HKG
Content-Disposition: inline;filename=f.txt
traceId: 5520cb7a-e3f2-41f2-b313-2a0e90581042
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/jqplot/plugins/jqplot.dateAxisRenderer.min.js?v=.4qfJsdWiq0OT&_cdn=cloudflare | 210.74.226.205 | 200 | 10 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/jqplot/plugins/jqplot.dateAxisRenderer.min.js?v=.4qfJsdWiq0OT&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (9960), with CRLF line terminators Hash387309ce87997b9ee9704a513e2d0c66 78754e6a9cc9beb50e8ef38e8e7f63215db99321 4dafeedc5ce4155b2dcc4fc74347e71f38dc6636339b58c8291cb3fc6badfda7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/javascript/jqplot/plugins/jqplot.dateAxisRenderer.min.js?v=.4qfJsdWiq0OT&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:36 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 10069
Connection: keep-alive
Last-Modified: Fri, 05 Jan 2018 01:34:51 GMT
ETag: ".4qfJsdWiq0OT"
Cache-Control: public,max-age=15552000
Expires: Sun, 13 Oct 2024 08:29:09 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 577708
Vary: Accept-Encoding
CF-RAY: 879742597dfe84a8-HKG
Content-Disposition: inline;filename=f.txt
traceId: 9dc97d61-0deb-401c-8f2a-08bca1b8e2c9
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/jqplot/plugins/jqplot.highlighter.min.js?v=.bt1BStJ5PY3c&_cdn=cloudflare | 210.74.226.205 | 200 | 7.6 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/jqplot/plugins/jqplot.highlighter.min.js?v=.bt1BStJ5PY3c&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (7449), with CRLF line terminators Hash2015d554b9233aa89171a46488d873dd 75ee06c190f70fd3c8b326387bb17222ca8f9833 17f151ef8c91292043cd40bf201486a2b77ec91e60b6b0c2ca58e7f8b7c8b211
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/javascript/jqplot/plugins/jqplot.highlighter.min.js?v=.bt1BStJ5PY3c&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:36 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 7558
Connection: keep-alive
Last-Modified: Fri, 05 Jan 2018 01:34:51 GMT
ETag: ".bt1BStJ5PY3c"
Cache-Control: public,max-age=15552000
Expires: Tue, 15 Oct 2024 11:39:08 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 431696
Vary: Accept-Encoding
CF-RAY: 879742554a7d861c-HKG
Content-Disposition: inline;filename=f.txt
traceId: b1bd9826-63c7-4406-8057-c247c1217951
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/dselect.js?v=sjouo3-33Gox&l=english&_cdn=cloudflare | 210.74.226.205 | 200 | 9.3 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/dselect.js?v=sjouo3-33Gox&l=english&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hashb23a2ea37fb7dc6a317180acb9640bba 559826c6b73a59bccf54f9034d7e8c43d03c091a 23d2a8fbaa5a5f1f551b5d70440adee80fd519b52b3d6559cbbea35296679e2f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/shared/javascript/dselect.js?v=sjouo3-33Gox&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:36 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 9318
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "sjouo3-33Gox"
Cache-Control: public,max-age=15552000
Expires: Sat, 31 Aug 2024 20:30:28 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 4387686
Vary: Accept-Encoding
CF-RAY: 8797110ff9e59b42-HKG
Content-Disposition: inline;filename=f.txt
traceId: aac452da-c754-47e8-96ad-67b08466af64
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/shared_global.js?v=XPgJuNunk65I&l=english&_cdn=cloudflare | 210.74.226.205 | 200 | 154 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/shared_global.js?v=XPgJuNunk65I&l=english&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (2642), with CRLF line terminators Size154 kB (154433 bytes) Hash3ea75d220946e132ef510d9528f6bc23 97d7f88a2e43c7022bb3f72c28311f4f50221f77 a1d4a440e19a70f2457826c0def00e71d3108771e410d28421ce212f5e6a8c21
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/shared/javascript/shared_global.js?v=XPgJuNunk65I&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:35 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 154433
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "XPgJuNunk65I"
Cache-Control: public,max-age=15552000
Expires: Sun, 06 Oct 2024 22:37:24 GMT
X-Cache: HIT
CF-Cache-Status: HIT
Age: 925956
Vary: Accept-Encoding
CF-RAY: 87764a202d87b472-HKG
Content-Disposition: inline;filename=f.txt
traceId: 76e18e21-0f69-47a0-8c3d-7fa305f1d899
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/market.js?v=PPAhWEfZ1Yy2&l=english&_cdn=cloudflare | 210.74.226.205 | 200 | 74 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/market.js?v=PPAhWEfZ1Yy2&l=english&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hasha592cdfaa873a7e58ac95f3c4160520e f9ffb23d010d1375da805fcd594fe2cdadae7a71 87c2bb0e046bcdf323103bb5da24b260ded77c815edd3e180ef72cb02b03c07a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/javascript/market.js?v=PPAhWEfZ1Yy2&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:35 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 73541
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "PPAhWEfZ1Yy2"
Cache-Control: public,max-age=15552000
Expires: Sat, 19 Oct 2024 10:58:04 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 188429
Vary: Accept-Encoding
CF-RAY: 8797110baf3684a5-HKG
Content-Disposition: inline;filename=f.txt
traceId: 5dd6944e-74dc-4456-93da-b3a2a76c4c03
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/billingaddress.js?v=LJxeQNYmrSdv&l=english&_cdn=cloudflare | 210.74.226.205 | 200 | 3.9 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/billingaddress.js?v=LJxeQNYmrSdv&l=english&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash2c9c5e40d626ad276ffa852680a63881 af2eb2b1e763d64910b8711f3627a7b4dacd88ce 627e897d0a9e8ef50f203119d96153f290853941e5bb39eca7ed293aa473ec4f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/shared/javascript/billingaddress.js?v=LJxeQNYmrSdv&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:36 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 3949
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "LJxeQNYmrSdv"
Cache-Control: public,max-age=15552000
Expires: Tue, 15 Oct 2024 11:26:36 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 532318
Vary: Accept-Encoding
CF-RAY: 87971113cd675dea-HKG
Content-Disposition: inline;filename=f.txt
traceId: 1da9d4d7-4785-47bb-8319-18fb7cc28fdd
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/economy.js?v=7F-CkHa-o5A1&l=english&_cdn=cloudflare | 210.74.226.205 | 200 | 148 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/economy.js?v=7F-CkHa-o5A1&l=english&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeASCII text, with CRLF line terminators Size148 kB (148040 bytes) Hasha7c3c7be60cd9fa9d9b915063d5cab85 5dbf3fcfc1adbc03a4ca3657a3c58ae175bd9f01 52315eac3c2ef74d92852598385b167581c836c382f33f146a51fd55f99eb942
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/javascript/economy.js?v=7F-CkHa-o5A1&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:35 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 148040
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "7F-CkHa-o5A1"
Cache-Control: public,max-age=15552000
Expires: Sat, 31 Aug 2024 23:41:03 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 4376250
Vary: Accept-Encoding
CF-RAY: 8797110f9a5f04d2-HKG
Content-Disposition: inline;filename=f.txt
traceId: 29779f8d-a50a-417b-9f8b-597b539d8ed2
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english&_cdn=cloudflare | 210.74.226.205 | 200 | 25 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with CRLF line terminators Hasha52bc800ab6e9df5a05a5153eea29ffb 8661643fcbc7498dd7317d100ec62d1c1c6886ff 57cfaf9b92c98541f769090cd0229a30013cea7cfafc18519ca654bfae29e14e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:37 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 24657
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "pSvIAKtunfWg"
Cache-Control: public,max-age=15552000
Expires: Sun, 29 Sep 2024 09:11:21 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 1579141
Vary: Accept-Encoding
CF-RAY: 87764a245cf885f2-HKG
Content-Disposition: inline;filename=f.txt
traceId: ec08b921-3b23-40c4-9234-34fe6b646bdf
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/jqplot/jquery.jqplot.js?v=.vPLCymFir4xZ&_cdn=cloudflare | 210.74.226.205 | 200 | 478 kB |
URL GET HTTP/1.1st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/jqplot/jquery.jqplot.js?v=.vPLCymFir4xZ&_cdn=cloudflare IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Size478 kB (478032 bytes) Hashda2933196162a6da633c0452a34b3474 0117cb363f00249b677485bd0fd062ce2fc75874 7bcef11603eeb8cb1010562f78425eedc2eca8fc9027f7533832fed37aa433e6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /community-cloudflare-steamstatic-com/js/public/javascript/jqplot/jquery.jqplot.js?v=.vPLCymFir4xZ&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:36 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 478032
Connection: keep-alive
Last-Modified: Fri, 05 Jan 2018 01:34:51 GMT
ETag: ".vPLCymFir4xZ"
Cache-Control: public,max-age=15552000
Expires: Mon, 21 Oct 2024 06:59:51 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 31942
Vary: Accept-Encoding
CF-RAY: 879742599f72098d-HKG
Content-Disposition: inline;filename=f.txt
traceId: 61d99773-93df-479b-a953-01ba59001123
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes
|
|
| community.cloudflare.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1 | 172.64.145.151 | 200 OK | 291 B |
URL GET HTTP/2community.cloudflare.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1 IP172.64.145.151:443
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerLet's Encrypt Subjectcloudflare.steamstatic.com Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35 ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT
File typePNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced Hasha2796187c58c7e948159e37d6990ecc2 4209cd85add507247f9ce5a87a8c9095b54ee417 23341256db7f44b1f3811880fa2bae6b7748bbf6b62c544a162e38cf0d5c5082
GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:16:39 GMT
content-type: image/png
content-length: 291
last-modified: Wed, 21 Mar 2018 00:07:17 GMT
etag: "5ab1a235-123"
x-cache: MISS
cf-cache-status: HIT
age: 6246
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87abff97cec1568e-OSL
X-Firefox-Spdy: h2
|
|
| community.cloudflare.steamstatic.com/public/images/economy/market/header/market_banner.jpg | 172.64.145.151 | 200 OK | 13 kB |
URL GET HTTP/2community.cloudflare.steamstatic.com/public/images/economy/market/header/market_banner.jpg IP172.64.145.151:443
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerLet's Encrypt Subjectcloudflare.steamstatic.com Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35 ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 951x121, components 3 Hash29668027273cae465be0a8c800819fe2 5478267bf32b8bf8fad58620fc2a6efdb2469ce7 1a065a586c2dae5413359ccf72bcfb88d704f3842a75b4961548ff67691047e4
GET /public/images/economy/market/header/market_banner.jpg HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:16:39 GMT
content-type: image/jpeg
content-length: 13083
access-control-allow-origin: *
cf-bgj: h2pri
etag: "5a4ed638-331b"
last-modified: Fri, 05 Jan 2018 01:34:48 GMT
x-cache: MISS
cf-cache-status: HIT
age: 4143
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87abff97dec3568e-OSL
X-Firefox-Spdy: h2
|
|
| community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 | 172.64.145.151 | 200 OK | 124 kB |
URL GET HTTP/2community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 IP172.64.145.151:443
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerLet's Encrypt Subjectcloudflare.steamstatic.com Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35 ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT
File typeTrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaSans Size124 kB (124048 bytes) Hash2d64caa5ecbf5e42cbb766ca4d85e90e 147420abceb4a7fd7e486dddcfe68cda7ebb3a18 045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f
GET /public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://st.aircsgo.com
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:16:39 GMT
content-type: application/octet-stream
content-length: 124048
last-modified: Tue, 28 Jul 2020 23:16:28 GMT
etag: "5f20b1cc-1e490"
access-control-allow-origin: *
x-cache: MISS
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87abff97eec9568e-OSL
X-Firefox-Spdy: h2
|
|
| community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 | 172.64.145.151 | 200 OK | 123 kB |
URL GET HTTP/2community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 IP172.64.145.151:443
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerLet's Encrypt Subjectcloudflare.steamstatic.com Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35 ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT
File typeTrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;MotivaSan Size123 kB (122684 bytes) Hash57613e143ff3dae10f282e84a066de28 88756cc8c6db645b5f20aa17b14feefb4411c25f 19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14
GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://st.aircsgo.com
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:16:39 GMT
content-type: application/octet-stream
content-length: 122684
last-modified: Tue, 28 Jul 2020 23:16:28 GMT
etag: "5f20b1cc-1df3c"
access-control-allow-origin: *
x-cache: MISS
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87abff97dec6568e-OSL
X-Firefox-Spdy: h2
|
|
| community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015 | 172.64.145.151 | 200 OK | 123 kB |
URL GET HTTP/2community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015 IP172.64.145.151:443
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerLet's Encrypt Subjectcloudflare.steamstatic.com Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35 ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT
File typeTrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight4.015;Plau;MotivaSans- Size123 kB (122660 bytes) Hashd45f521dba72b19a4096691a165b1990 2a08728fbb9229acccbf907efdf4091f9b9a232f 6b7a3177485c193a2e80be6269b6b12880e695a8b4349f49fccf87f9205badcc
GET /public/shared/fonts/MotivaSans-Light.ttf?v=4.015 HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://st.aircsgo.com
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:16:39 GMT
content-type: application/octet-stream
content-length: 122660
last-modified: Tue, 28 Jul 2020 23:16:28 GMT
etag: "5f20b1cc-1df24"
access-control-allow-origin: *
x-cache: MISS
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87abff97fecb568e-OSL
X-Firefox-Spdy: h2
|
|
| st.aircsgo.com/favicon.ico | 210.74.226.205 | 200 | 39 kB |
URL GET HTTP/1.1st.aircsgo.com/favicon.ico IP210.74.226.205:443 ASN#4812 China Telecom Group
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerDigiCert Inc Subjectst.aircsgo.com Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File typeMS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel Hash231913fdebabcbe65f4b0052372bde56 553909d080e4f210b64dc73292f3a111d5a0781f 9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Steam | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case
Cookie: sessionid=2681880e36c961234f0a009e; steamCountry=HK%7C23cecaa5e97b7cd017869ae963e1910e; uid=4496d495-673e-4e75-9b52-62dfc3276d1a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.25.4
Date: Sat, 27 Apr 2024 04:16:40 GMT
Content-Type: image/x-icon
Content-Length: 38554
Connection: keep-alive
Last-Modified: Tue, 18 Sep 2018 23:32:59 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Method: *
Access-Control-Allow-Methods: POST, GET, HEAD, OPTIONS
Access-Control-Allow-Origin: https://st.aircsgo.com
Access-Control-Expose-Headers: X-eresult,X-error_message
Cache-Control: public,max-age=86400
Expires: Thu, 05 Oct 2023 04:33:01 GMT
Origin: https://st.aircsgo.com
Set-Cookie: uid=4496d495-673e-4e75-9b52-62dfc3276d1a; Path=/; Domain=st.aircsgo.com
X-Proxy-Hostname: steam-session-cluster-6c6fc676d6-mh7h2
traceId: eaac1cf3ad17141914003664299d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains
|
|
| community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016 | 172.64.145.151 | 200 OK | 3.7 kB |
URL GET HTTP/2community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016 IP172.64.145.151:443
Requested byhttps://st.aircsgo.com/market/listings/730/dreams%20&%20nightmares%20case CertificateIssuerLet's Encrypt Subjectcloudflare.steamstatic.com Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35 ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT
File typeSVG Scalable Vector Graphics image Hashca81bf2f0d99757a6f97b0fec3cf5ab5 de4b8d0953809e4687fa45f95092c9c5e92ca146 b83d5a05f79f53d2945fe89bee2239fad2761c2eccee6ad655bbec92a85a80e1
GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:16:32 GMT
content-type: image/svg+xml
last-modified: Tue, 17 Nov 2020 23:34:54 GMT
etag: W/"5fb45e1e-e64"
access-control-allow-origin: *
x-cache: MISS
cf-cache-status: HIT
age: 6569
vary: Accept-Encoding
server: cloudflare
cf-ray: 87abff6bbe97568e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|