Report - st.aircsgo.com/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory/

Report Overview

Submitted URL
st.aircsgo.com/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory/
IP
210.74.226.205
ASN
#4812 China Telecom Group
Submitted
2024-04-25 23:31:06
Access
public
Website Title
Sign In
Final URL
st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
202

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
st.aircsgo.com	unknown	unknown	No data	No data	57 kB	3.5 MB	210.74.226.205
community.cloudflare.steamstatic.com	15754	2013-11-07	2020-06-24	2024-04-24	5.2 kB	520 kB	172.64.145.151

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam
2024-04-20	medium	st.aircsgo.com/	Steam

PhishTank

Scan Date	Severity	Indicator	Alert
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l=english&_cdn=cloudflare	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/buttons.css?v=tuNiaSwXwcYT&l=english&_cdn=cloudflare	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/shared_global.css?v=2VoZa2M8Wh3k&l=english&_cdn=cloudflare	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/globalv2.css?v=pwVcIAtHNXwg&l=english&_cdn=cloudflare	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/login.css?v=0H1th98etnSV&l=english&_cdn=cloudflare	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/skin_1/home.css?v=-6qQi3rZclGf&l=english&_cdn=cloudflare	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&l=english&_cdn=cloudflare	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&_cdn=cloudflare&load=effects,controls,slider,dragdrop	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/shared_global.js?v=XPgJuNunk65I&l=english&_cdn=cloudflare	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english&_cdn=cloudflare	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/global.js?v=PyuRtGtUpR0t&l=english&_cdn=cloudflare	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&_cdn=cloudflare	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/applications/community/main.css?v=EyWBqDQS-6jg&l=english&_cdn=cloudflare	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/login.js?v=Vbm1kuHoXmMB&l=english&_cdn=cloudflare	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/main.js?v=c4UneKQJS7M3&l=english&_cdn=cloudflare	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/libraries~b28b7af69.js?v=VGtvPLNviurP&l=english&_cdn=cloudflare	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/localization/sales_english-json.js?contenthash=78c2664709aeddc975e5	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/localization/main_english-json.js?contenthash=3c031c8e5ba8767bb473	Other
2024-04-22	medium	st.aircsgo.com/favicon.ico	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/chunk~906a41d8e.js?contenthash=bc65a674fca36dfbad5e	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/libraries~f036ce556.js?contenthash=4aeaa7f3e9a9fc232310	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/applications/community/chunk~f036ce556.css?contenthash=65008c72e7e5586e0c2d	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/navevents.js?contenthash=637ad4060aaa08d3ae85	Other
2024-04-22	medium	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/chunk~f036ce556.js?contenthash=2ce1adc8a382f77bdf57	Other
2024-04-22	medium	st.aircsgo.com/steamlogin/jwt/ajaxrefresh	Other
2024-04-22	medium	st.aircsgo.com/steamapi/IAuthenticationService/BeginAuthSessionViaQR/v1	Other
2024-04-22	medium	st.aircsgo.com/steamapi/IAuthenticationService/PollAuthSessionStatus/v1	Other
2024-04-22	medium	st.aircsgo.com/steamapi/IClientMetricsService/ReportClientError/v1	Other
2024-04-22	medium	st.aircsgo.com/steamapi/IAuthenticationService/PollAuthSessionStatus/v1	Other
2024-04-22	medium	st.aircsgo.com/steamapi/IAuthenticationService/PollAuthSessionStatus/v1	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed
2024-04-25	medium	aircsgo.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (28)

	URL	Size	First Seen	Last Seen
	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/login.js?v=Vbm1kuHoXmMB&l=english&_cdn=cloudflare	61 kB	2024-04-26	2024-04-26
Pretty URL st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/login.js?v=Vbm1kuHoXmMB&l=english&_cdn=cloudflare IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 01:31:14 Last Seen2024-04-26 06:05:49 Times Seen6 Hash ef11753c6bebc072d74ad07c1840b570 5b880bd5f28e92a241dd47ada7390f2056d1aee0 17ca48fcf3691c74ac48283a07c68cd198a61114afda5d4d751ac7cd9780403d Loading...

	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english&_cdn=cloudflare	25 kB	2023-03-08	2024-05-05
Pretty URL st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english&_cdn=cloudflare IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 15:04:23 Last Seen2024-05-05 07:38:38 Times Seen3003 Hash a52bc800ab6e9df5a05a5153eea29ffb 8661643fcbc7498dd7317d100ec62d1c1c6886ff 57cfaf9b92c98541f769090cd0229a30013cea7cfafc18519ca654bfae29e14e Loading...

	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/localization/main_english-json.js?contenthash=3c031c8e5ba8767bb473	217 kB	2024-04-26	2024-04-26
Pretty URL st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/localization/main_english-json.js?contenthash=3c031c8e5ba8767bb473 IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 01:26:04 Last Seen2024-04-26 06:08:44 Times Seen14 Hash e0dd0bf97735f086cb20a509bad241d6 a7036a85fca0509570636fa43e7f22122985eac3 003cdeedbb65d2fffc9eae4d02a37317c8dbc764d0b9cdd0a0ea7e8c1a7dff24 Loading...

	st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F	374 B	2023-03-12	2024-05-05
Pretty URL st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-12 09:45:05 Last Seen2024-05-05 07:38:37 Times Seen1228 Hash b70da133ca779ab3e43a34b27582022a 43c146ab15416cc77dadea9d17dbd69b4b001b4b 9b7266c903d26b60f47edbf7647ebe6fe6810e4e06c0cf06f1348944ee585b2c Loading...

	st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F	521 B	2023-03-12	2024-05-05
Pretty URL st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-12 09:45:05 Last Seen2024-05-05 07:38:37 Times Seen1227 Hash 1ca437221076a602c053146ac451e9a2 605ca877765dcd8a7420d4e3df5a644f5468b5e7 1ce28f3f9525bda804d49ef59149ff51b079c28dfdee7a6b86107bcd0350538f Loading...

	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&_cdn=cloudflare&load=effects,controls,slider,dragdrop	122 kB	2023-03-07	2024-05-05
Pretty URL st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&_cdn=cloudflare&load=effects,controls,slider,dragdrop IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:42 Last Seen2024-05-05 07:38:38 Times Seen4126 Hash 39e34882ba4417cb4b1b84916dabb770 0d0ca081fb60c8aad337091bafcbe84f966c38b0 da708635da162ea493874627775c3520a42145b79c73bf787b5113bf87c0b27c Loading...

	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/global.js?v=PyuRtGtUpR0t&l=english&_cdn=cloudflare	104 kB	2024-04-26	2024-04-27
Pretty URL st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/global.js?v=PyuRtGtUpR0t&l=english&_cdn=cloudflare IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 01:31:14 Last Seen2024-04-27 06:17:05 Times Seen8 Hash 0c978858633fdb2c6e1d63ed21f7131b d9bf7680b8efcd58242a9fb1fbdff175b20362c1 47c2fe5dd6592780e7474b1a99346c2efedf966e7981c4468c38e71273e5726b Loading...

	st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F	93 B	2024-04-26	2024-04-27
Pretty URL st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-26 01:31:14 Last Seen2024-04-27 06:17:05 Times Seen4 Hash a3ac621ff4b733af5864923f64a4b72b 10f2b482468c73e1c88d39d4ca084a5d597707d9 3a34c773dba45f35e4b2e9c40fdb15ffb576699ee35f7521300766aec0fc1021 Loading...

	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/login.js?contenthash=3f5d4d1eea08fcdfe1a3	845 B	2024-04-26	2024-04-26
Pretty URL st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/login.js?contenthash=3f5d4d1eea08fcdfe1a3 IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 01:31:03 Last Seen2024-04-26 06:05:49 Times Seen10 Hash 11c26fd8c339b00d1ef9b8babfd04768 4800d5bb400d3e4c8b6aa6a9952e4c7a05d82375 913a32237f68d3f605a9ce8633b6e2c4db36c180af8c1f3adc117e0ea1580f35 Loading...

	st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F	114 B	2023-03-07	2024-05-05
Pretty URL st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:06:51 Last Seen2024-05-05 07:38:37 Times Seen1380 Hash 16f8c3f24c03dd22c268f120ecbb7d9c 0fc91d904a8d38ad4588344a0191af727fd09311 61c71b0ebf72ea0d8fc27d307870302ea163aa9bd344b3ba1402a2e894721925 Loading...

	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&_cdn=cloudflare	96 kB	2023-03-07	2024-05-05
Pretty URL st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&_cdn=cloudflare IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:42 Last Seen2024-05-05 07:38:38 Times Seen6214 Hash 4dc834d16a0d219d5c2b8a5b814569e4 4fbe0563917d6f6289e4e1b4a0a8758e4e43bda9 91222f96f34735ebc88df208017e54d4329b9202e3e52367fb8b149698a1a5ef Loading...

	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare	16 kB	2023-03-07	2024-05-05
Pretty URL st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:42 Last Seen2024-05-05 07:38:38 Times Seen5206 Hash 72938851e7c2ef7b63299eba0c6752cb b75196bd3a6f9f4dfc1bbf5e43e96874bcd9ce4e e2d4e0e1d3e162fdc815f16dfff9ae9b0a967949f0f3ae371f947d730a3f0661 Loading...

	st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F	317 B	2024-04-26	2024-04-27
Pretty URL st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-26 01:31:14 Last Seen2024-04-27 06:17:05 Times Seen4 Hash 6cf574a54627630e81c00a3215500b3b ae352103c5a4d9c2b7605aff8a54ab1036725dc4 3f91f200e37e5bca67b5f330b9c4e1d6e7b4135fcef197c23d359711052c1cbe Loading...

	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/manifest.js?v=EL8POrEv0mo4&l=english&_cdn=cloudflare	16 kB	2024-04-26	2024-04-26
Pretty URL st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/manifest.js?v=EL8POrEv0mo4&l=english&_cdn=cloudflare IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 01:26:05 Last Seen2024-04-26 06:08:43 Times Seen14 Hash 35b856e0906a2c42857273aa4a00da0d 142966cf9f6481597391a4b7783003d54b50f8f4 846f92ea33a2ab91d45abdbc1a54397ed4a791c8f90f01bd41c4c3b5172b6900 Loading...

	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/shared_global.js?v=XPgJuNunk65I&l=english&_cdn=cloudflare	154 kB	2024-04-26	2024-04-27
Pretty URL st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/shared_global.js?v=XPgJuNunk65I&l=english&_cdn=cloudflare IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 01:31:14 Last Seen2024-04-27 06:17:05 Times Seen8 Hash 3ea75d220946e132ef510d9528f6bc23 97d7f88a2e43c7022bb3f72c28311f4f50221f77 a1d4a440e19a70f2457826c0def00e71d3108771e410d28421ce212f5e6a8c21 Loading...

	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/localization/sales_english-json.js?contenthash=78c2664709aeddc975e5	172 kB	2024-04-25	2024-04-27
Pretty URL st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/localization/sales_english-json.js?contenthash=78c2664709aeddc975e5 IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 06:15:04 Last Seen2024-04-27 08:03:28 Times Seen11 Hash 0b971180bd0c1da612b5f6a203212f09 4f2a8954bc6110159050ccbba737e74700fd488a cff2db81f602a2b3cda722c48e20d6dfd557b129ccc8e1e555ccbac47e5c8dda Loading...

	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/libraries~f036ce556.js?contenthash=4aeaa7f3e9a9fc232310	90 kB	2024-04-25	2024-04-27
Pretty URL st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/libraries~f036ce556.js?contenthash=4aeaa7f3e9a9fc232310 IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 06:15:01 Last Seen2024-04-27 08:03:29 Times Seen20 Hash 00980fbe21d99d69334e7c3fdfd18e25 84cebab4a14e0db8465af1a88ccb0d38399cb3be b41656f3ffaea7983c4735caae7cbee7f3ed324b48d271045fe959dd1a4343c1 Loading...

	st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F	138 B	2023-03-07	2024-05-05
Pretty URL st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:06:51 Last Seen2024-05-05 07:38:37 Times Seen1181 Hash 9f44e1f62e772303b2e525ddb1612081 e4a96a617321364bc3a043575388a6ceb1c0f4c9 9bde39c62b2614c2823a872c6c9d049d0752a22d1ed9474b8bf0cd318001d288 Loading...

	st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F	295 B	2023-06-21	2024-05-05
Pretty URL st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-21 01:00:33 Last Seen2024-05-05 07:38:37 Times Seen1143 Hash 6004c14868a256e4cae4dec3db42e6d7 48b9c9cef4ebb49a77da2a00b57c3b2c9d86472b 2c550300a61671a67a72219fc89acad93ea8c8cb54d5468ec6f891eda7f30e96 Loading...

	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/navevents.js?contenthash=637ad4060aaa08d3ae85	14 kB	2024-04-25	2024-04-27
Pretty URL st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/navevents.js?contenthash=637ad4060aaa08d3ae85 IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 06:15:05 Last Seen2024-04-27 08:03:30 Times Seen22 Hash 2d823c7e07736ed93735a205fde2567a 056181e2a7f57a7dc46d65e66189e8f44156afc9 f402cfc53c8a3924955d0de30f3d3a23f37ec72ca68292f00669be9dea3e61d6 Loading...

	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/chunk~f036ce556.js?contenthash=2ce1adc8a382f77bdf57	89 kB	2024-04-25	2024-04-27
Pretty URL st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/chunk~f036ce556.js?contenthash=2ce1adc8a382f77bdf57 IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 06:15:01 Last Seen2024-04-27 08:03:30 Times Seen20 Hash f08ed755ce667d4afb0a2a95befde1d3 a479b356f3017d7bbe3955cacb73ac2320f134bf c5895019e18a159f82c432c043ad7dea5235365a4026767f8fac7d76f4b25c76 Loading...

	st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F	885 B	2024-04-26	2024-04-26
Pretty URL st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-26 01:31:15 Last Seen2024-04-26 01:31:15 Times Seen1 Hash 731cf359c9ac7a0a6c24fd5af6ce74b5 a237c8a70e629281eb120eecade6d7860854e25b 06854bab255b9b9ed999aefbc2e7bf91e01c4fe3cf4869a7d8e488b035851fbe Loading...

	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/localization/shared_english-json.js?contenthash=5ecf6a2294724519e96b	186 kB	2024-04-25	2024-04-27
Pretty URL st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/localization/shared_english-json.js?contenthash=5ecf6a2294724519e96b IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 06:15:05 Last Seen2024-04-27 08:03:29 Times Seen22 Hash 4ff2db6f1547ca0a1f0334b98300af26 da73d11eab8701db977543717d5fc279fa9bb12a 70df8238fa0019c4c0dbf4eddc715eb05b0a195ce72ccde4d8f930855cfe88fb Loading...

	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/chunk~906a41d8e.js?contenthash=bc65a674fca36dfbad5e	18 kB	2024-04-25	2024-04-27
Pretty URL st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/chunk~906a41d8e.js?contenthash=bc65a674fca36dfbad5e IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 06:15:03 Last Seen2024-04-27 08:03:30 Times Seen20 Hash cb6f54ce456e92e1ad708f342076b397 0e979d48ffc37e4981327e398480573e78f9443a 95be3d0fcac5633fc039aba02f42ea683c2da8a926c845e399e90ca19df43f94 Loading...

	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&_cdn=cloudflare	169 kB	2023-03-07	2024-05-05
Pretty URL st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&_cdn=cloudflare IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:12:12 Last Seen2024-05-05 07:38:38 Times Seen4579 Hash 6a39e0b509fecb928d47b8a2643fed2a f67fa6cb1d09963d10ba117d6553c8e7d5bc7863 d8bdea7fff893dbdbeaf6c2affec091a77483b9ec10e7958486bc3b6cc170c96 Loading...

	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/main.js?v=c4UneKQJS7M3&l=english&_cdn=cloudflare	588 kB	2024-04-25	2024-04-27
Pretty URL st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/main.js?v=c4UneKQJS7M3&l=english&_cdn=cloudflare IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 06:15:04 Last Seen2024-04-27 08:03:29 Times Seen22 Hash fc6617689197d4f7796e8a057de98244 2288e9052bb195bdf1fdbd63cdf09182b2f347ed 8b97e93a1f1e87bd51fde3483cb8aa88bae028b77a9e89516472f9978e23bb8c Loading...

	st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/libraries~b28b7af69.js?v=VGtvPLNviurP&l=english&_cdn=cloudflare	927 kB	2024-04-25	2024-04-27
Pretty URL st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/libraries~b28b7af69.js?v=VGtvPLNviurP&l=english&_cdn=cloudflare IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 06:15:02 Last Seen2024-04-27 08:03:29 Times Seen22 Hash aaa2b4c9a67fb3338514be5552fa9203 8315a289e5509a42cc87ff670cf6d155f1bb44a6 1bde7c2c72c06b16f9c35712fc269da2ab6d6ca2b1dc8a50787c35f189933c0e Loading...

	st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F	1.0 kB	2024-04-26	2024-04-26
Pretty URL st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F IP 210.74.226.205 ASN #4812 China Telecom Group Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-26 01:31:15 Last Seen2024-04-26 01:31:15 Times Seen1 Hash 6160cc8515027e58c80b807c2718c2d4 b44243b507750af26657b5179cbedd974fd34e42 209f9f81b3499f3d564e93c795930d37b507e137eb6198747bed262164c427c1 Loading...

HTTP Transactions (49)

URL IP Response Size

st.aircsgo.com/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory/

210.74.226.205

302

0 B

URL User Request GET HTTP/1.1
st.aircsgo.com/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory/
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory//login/home/?goto=/my/inventory/login/home/?goto=/my/inventory/ HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:38 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Method: *
Access-Control-Allow-Methods: POST, GET, HEAD, OPTIONS
Access-Control-Allow-Origin: https://st.aircsgo.com
Access-Control-Expose-Headers: X-eresult,X-error_message
Cache-Control: no-cache
Content-Encoding: gzip
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Location: /login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Origin: https://st.aircsgo.com
Set-Cookie: sessionid=693c06ef9f0668d69947b3e8; Path=/; Secure; SameSite=None;Domain=st.aircsgo.com
steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; Path=/; Secure; HttpOnly; SameSite=None;Domain=st.aircsgo.com
uid=de6c244f-3062-4ce3-907e-ff63dff652ac; Path=/; Domain=st.aircsgo.com
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-Proxy-Hostname: steam-session-cluster-6c6fc676d6-8qbg7
traceId: eaac1cf3af17140878381895188d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains

st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F

210.74.226.205

200

10 kB

URL User Request GET HTTP/1.1
st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (3060), with CRLF, LF line terminators
Size
10 kB (9951 bytes)
Hash
4d6ea918a8360d6bc8723dcada10e883
136c7076c4a581d1899fa74a42a8f58647c557fb
3decf3b898022286a95c296a15a9226a2b9b7e232560e5d1a6f3923629c0826b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:39 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 9951
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Method: *
Access-Control-Allow-Methods: POST, GET, HEAD, OPTIONS
Access-Control-Allow-Origin: https://st.aircsgo.com
Access-Control-Expose-Headers: X-eresult,X-error_message
Cache-Control: no-cache
Content-Encoding: gzip
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Origin: https://st.aircsgo.com
Set-Cookie: uid=de6c244f-3062-4ce3-907e-ff63dff652ac; Path=/; Domain=st.aircsgo.com
Vary: Accept-Encoding
X-Frame-Options: DENY
X-Proxy-Hostname: steam-session-cluster-6c6fc676d6-8qbg7
traceId: eaac1cf3ad17140878388837672d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains

community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png

172.64.145.151

200 OK

11 kB

URL GET HTTP/2
community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png
IP
172.64.145.151:443
ASN
#13335 CLOUDFLARENET

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerLet's Encrypt
Subjectcloudflare.steamstatic.com
Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35
ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT

File type
PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Size
11 kB (10863 bytes)
Hash
a4e79c73ee13cb25b60fc4b0ba1f690c
b690c31b2eb1b0eb085e91aaae7e79f03debe7c1
6cb869df089146c12efb5e9c968e911c314842624ba6f052a11346ac734cadc8

HTTP Headers

GET /public/shared/images/responsive/header_logo.png HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 23:30:39 GMT
content-type: image/png
content-length: 10863
last-modified: Fri, 05 Jan 2018 01:35:16 GMT
etag: "5a4ed654-2a6f"
x-cache: MISS
cf-cache-status: HIT
age: 3937
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a21f46ca93b52d-OSL
X-Firefox-Spdy: h2

community.cloudflare.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png

172.64.145.151

200 OK

3.8 kB

URL GET HTTP/2
community.cloudflare.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
IP
172.64.145.151:443
ASN
#13335 CLOUDFLARENET

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerLet's Encrypt
Subjectcloudflare.steamstatic.com
Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35
ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT

File type
PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Size
3.8 kB (3777 bytes)
Hash
eabc76eb57feae44add7faead028521e
4e3e53938fad15661d2d046a868338841a95db19
fc9e6260a2706ae146282d77e67bc1b74688435f8912ab4c1932641eec28bffa

HTTP Headers

GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 23:30:39 GMT
content-type: image/png
content-length: 3777
last-modified: Fri, 05 Jan 2018 01:35:16 GMT
etag: "5a4ed654-ec1"
x-cache: MISS
cf-cache-status: HIT
age: 3937
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a21f46ca94b52d-OSL
X-Firefox-Spdy: h2

community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1

172.64.145.151

200 OK

3.7 kB

URL GET HTTP/2
community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
IP
172.64.145.151:443
ASN
#13335 CLOUDFLARENET

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerLet's Encrypt
Subjectcloudflare.steamstatic.com
Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35
ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT

File type
PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced
Size
3.7 kB (3737 bytes)
Hash
1626f52addb7c56fe3679d82108c62e9
2b414092d66ecff528950093a655f755c3c7f3b5
ae9f6c61e25d15882bf57bde193d10d375bd315c9741cabda11d700fd1bb7dd1

HTTP Headers

GET /public/images/skin_1/footerLogo_valve.png?v=1 HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 23:30:39 GMT
content-type: image/png
content-length: 3737
last-modified: Fri, 05 Jan 2018 01:34:51 GMT
etag: "5a4ed63b-e99"
access-control-allow-origin: *
x-cache: MISS
cf-cache-status: HIT
age: 4277
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a21f46ca92b52d-OSL
X-Firefox-Spdy: h2

community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png

172.64.145.151

200 OK

1.8 kB

URL GET HTTP/2
community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
IP
172.64.145.151:443
ASN
#13335 CLOUDFLARENET

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerLet's Encrypt
Subjectcloudflare.steamstatic.com
Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35
ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT

File type
PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Size
1.8 kB (1846 bytes)
Hash
574c350c7b23ae794d5276f8580e0838
235c7b35c3468f8915eca01f7abdb43d34079609
8b97ba0dac22fe6704c1f6d95fe79613f33017804f256abb9006df0442491787

HTTP Headers

GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 23:30:39 GMT
content-type: image/png
content-length: 1846
last-modified: Fri, 05 Jan 2018 01:35:16 GMT
etag: "5a4ed654-736"
x-cache: MISS
cf-cache-status: HIT
age: 3937
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a21f46ca95b52d-OSL
X-Firefox-Spdy: h2

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l=english&_cdn=cloudflare

210.74.226.205

200

2.7 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l=english&_cdn=cloudflare
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
2.7 kB (2718 bytes)
Hash
19f4a36c629c358690fc93dbd234d105
6bbc819e64172d57a4abdaa20c8e2b8a32dd662c
e753a6b743187c7d592e6e2d3580336751e6211cd228ad7410e02db29ec91ad8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:39 GMT
Content-Type: text/css;charset=UTF-8
Content-Length: 2718
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "GfSjbGKcNYaQ"
Cache-Control: public,max-age=15552000
Expires: Sat, 31 Aug 2024 20:15:10 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 4044906
Vary: Accept-Encoding
CF-RAY: 87764a062ad920f6-HKG
Content-Disposition: inline;filename=f.txt
traceId: eaac1cf3b017136282172972155d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/buttons.css?v=tuNiaSwXwcYT&l=english&_cdn=cloudflare

210.74.226.205

200

34 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/buttons.css?v=tuNiaSwXwcYT&l=english&_cdn=cloudflare
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
ASCII text, with CRLF, LF line terminators
Size
34 kB (33770 bytes)
Hash
b6e362692c17c1c613dfc67197952242
fed8f68cdfdd8bf5c29fb0ebd418f796bc8af2dd
151dc1c5196a4ca683f292ae77fa5321f750c495a5c4ffd4888959eb46d9cdc1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/shared/css/buttons.css?v=tuNiaSwXwcYT&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:39 GMT
Content-Type: text/css;charset=UTF-8
Content-Length: 33770
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "tuNiaSwXwcYT"
Cache-Control: public,max-age=15552000
Expires: Sat, 31 Aug 2024 14:45:02 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 4044908
Vary: Accept-Encoding
CF-RAY: 87764a0ad87a04dd-HKG
Content-Disposition: inline;filename=f.txt
traceId: eaac1cf3ae17136282180502105d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/shared_global.css?v=2VoZa2M8Wh3k&l=english&_cdn=cloudflare

210.74.226.205

200

88 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/shared_global.css?v=2VoZa2M8Wh3k&l=english&_cdn=cloudflare
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
ASCII text, with very long lines (1819), with CRLF, LF line terminators
Size
88 kB (87472 bytes)
Hash
d95a196b633c5a1de4bfe531abe19544
b4d3e3d225c8f699d2c5661b194e6feadd9b5807
8a0e6fb8b50e1da206a13969ee4f1f904f0b0a430fd6455a10fc7829b6776ae4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/shared/css/shared_global.css?v=2VoZa2M8Wh3k&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:40 GMT
Content-Type: text/css;charset=UTF-8
Content-Length: 87472
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "2VoZa2M8Wh3k"
Cache-Control: public,max-age=15552000
Expires: Sun, 06 Oct 2024 22:37:45 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 925952
Vary: Accept-Encoding
CF-RAY: 87764a09f8ac20f6-HKG
Content-Disposition: inline;filename=f.txt
traceId: eaac1cf3b017136282179142158d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/globalv2.css?v=pwVcIAtHNXwg&l=english&_cdn=cloudflare

210.74.226.205

200

40 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/globalv2.css?v=pwVcIAtHNXwg&l=english&_cdn=cloudflare
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
ASCII text, with very long lines (4009), with CRLF, LF line terminators
Size
40 kB (39590 bytes)
Hash
a7055c200b47357c2051179f9b979bbd
701f861353694ceb6a41a867ac2e118a76400cdc
f553f59191af4f2b222a73d129b731d4f461c84a67d55cf8e29ba319fe13b078

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/css/globalv2.css?v=pwVcIAtHNXwg&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:40 GMT
Content-Type: text/css;charset=UTF-8
Content-Length: 39590
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "pwVcIAtHNXwg"
Cache-Control: public,max-age=15552000
Expires: Sun, 22 Sep 2024 22:52:20 GMT
X-Cache: HIT
CF-Cache-Status: HIT
Age: 2134675
Vary: Accept-Encoding
CF-RAY: 87764a0a6fde04dd-HKG
Content-Disposition: inline;filename=f.txt
traceId: eaac1cf3ae17136282179802104d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/login.css?v=0H1th98etnSV&l=english&_cdn=cloudflare

210.74.226.205

200

18 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/login.css?v=0H1th98etnSV&l=english&_cdn=cloudflare
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
assembler source, ASCII text, with CRLF, LF line terminators
Size
18 kB (18055 bytes)
Hash
d07d6d87df1eb67495c1dd5468ddd40d
82a7b8a839d305435589561b4745fe971d8a140d
d81707d16583953f9b6c2449bc28b079b1263aa6563b35bb2dc26bc537f3e8e2

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/shared/css/login.css?v=0H1th98etnSV&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:40 GMT
Content-Type: text/css;charset=UTF-8
Content-Length: 18055
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "0H1th98etnSV"
Cache-Control: public,max-age=15552000
Expires: Sat, 31 Aug 2024 18:32:08 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 4502579
Vary: Accept-Encoding
CF-RAY: 87a158ba0bea04fa-HKG
Content-Disposition: inline;filename=f.txt
traceId: eaac1cf3ac17140797071938888d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/skin_1/home.css?v=-6qQi3rZclGf&l=english&_cdn=cloudflare

210.74.226.205

200

15 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/skin_1/home.css?v=-6qQi3rZclGf&l=english&_cdn=cloudflare
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
ASCII text, with CRLF, LF line terminators
Size
15 kB (14934 bytes)
Hash
fbaa908b7ad972519f01b8018ed98f2e
625d6da35037b70fb9c4daa4622185ca44d0f4f2
84fe36fa18724445ef05858506ade2e9bdafd2cee2d55555dc94ac94ae58fc6b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/css/skin_1/home.css?v=-6qQi3rZclGf&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:40 GMT
Content-Type: text/css;charset=UTF-8
Content-Length: 14934
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "-6qQi3rZclGf"
Cache-Control: public,max-age=15552000
Expires: Mon, 16 Sep 2024 00:30:46 GMT
X-Cache: HIT
CF-Cache-Status: HIT
Age: 3179195
Vary: Accept-Encoding
CF-RAY: 87a158ba1d870ec0-HKG
Content-Disposition: inline;filename=f.txt
traceId: eaac1cf3b017140797072047668d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&l=english&_cdn=cloudflare

210.74.226.205

200

19 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&l=english&_cdn=cloudflare
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
ASCII text, with very long lines (1667), with CRLF, LF line terminators
Size
19 kB (19100 bytes)
Hash
7a0867f43372098ebbb7948a57e75bc9
6f53ff787f5c1b99a73cc8a3bedae946944771b3
1888d4455d4bbb2b8a15e8834498bc0ac62ec941c6edc29859a5fdcdd5c1f602

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:40 GMT
Content-Type: text/css;charset=UTF-8
Content-Length: 19100
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "eghn9DNyCY67"
Cache-Control: public,max-age=15552000
Expires: Sun, 20 Oct 2024 23:31:05 GMT
X-Cache: HIT
CF-Cache-Status: HIT
Age: 77
Vary: Accept-Encoding
CF-RAY: 8791a792ad690ed0-HKG
Content-Disposition: inline;filename=f.txt
traceId: eaac1cf3ac17139151645823565d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/skin_1/header.css?v=vh4BMeDcNiCU&l=english&_cdn=cloudflare

210.74.226.205

200

13 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/skin_1/header.css?v=vh4BMeDcNiCU&l=english&_cdn=cloudflare
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
ASCII text, with very long lines (629), with CRLF line terminators
Size
13 kB (12804 bytes)
Hash
be1e0131e0dc3620948b14da818b1a4d
810b4aff56a0e76cf870cc67e3092447b46dcd92
ebd518bec6383218452cc4597aeff5debc82b1f76cbea1950c5ecbfd59c5e3e5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/css/skin_1/header.css?v=vh4BMeDcNiCU&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:40 GMT
Content-Type: text/css;charset=UTF-8
Content-Length: 12804
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "vh4BMeDcNiCU"
Cache-Control: public,max-age=15552000
Expires: Sat, 31 Aug 2024 21:23:19 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 4040819
Vary: Accept-Encoding
CF-RAY: 87764a11dbc5b472-HKG
Content-Disposition: inline;filename=f.txt
traceId: eaac1cf3ad17136282191674625d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare

210.74.226.205

200

16 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
16 kB (16087 bytes)
Hash
72938851e7c2ef7b63299eba0c6752cb
b75196bd3a6f9f4dfc1bbf5e43e96874bcd9ce4e
e2d4e0e1d3e162fdc815f16dfff9ae9b0a967949f0f3ae371f947d730a3f0661

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:41 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 16087
Connection: keep-alive
Last-Modified: Tue, 22 Mar 2022 23:23:42 GMT
ETag: ".zYHOpI1L3Rt0"
Cache-Control: public,max-age=15552000
Expires: Sat, 31 Aug 2024 23:00:36 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 4034985
Vary: Accept-Encoding
CF-RAY: 87764a1e3da45def-HKG
Content-Disposition: inline;filename=f.txt
traceId: 5e974593-cdaf-4639-89f3-182f40707082
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&_cdn=cloudflare&load=effects,controls,slider,dragdrop

210.74.226.205

200

122 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&_cdn=cloudflare&load=effects,controls,slider,dragdrop
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
122 kB (122171 bytes)
Hash
39e34882ba4417cb4b1b84916dabb770
0d0ca081fb60c8aad337091bafcbe84f966c38b0
da708635da162ea493874627775c3520a42145b79c73bf787b5113bf87c0b27c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&_cdn=cloudflare&load=effects,controls,slider,dragdrop HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:41 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 122171
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "OeNIgrpEF8tL"
Cache-Control: public,max-age=15552000
Expires: Mon, 09 Sep 2024 14:56:44 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 3275574
Vary: Accept-Encoding
CF-RAY: 87764a144f06b472-HKG
Content-Disposition: inline;filename=f.txt
traceId: 7d2cc382-63d1-4aac-a661-a2f4e7e1a888
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/shared_global.js?v=XPgJuNunk65I&l=english&_cdn=cloudflare

210.74.226.205

200

154 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/shared_global.js?v=XPgJuNunk65I&l=english&_cdn=cloudflare
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (2642), with CRLF line terminators
Size
154 kB (154433 bytes)
Hash
3ea75d220946e132ef510d9528f6bc23
97d7f88a2e43c7022bb3f72c28311f4f50221f77
a1d4a440e19a70f2457826c0def00e71d3108771e410d28421ce212f5e6a8c21

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/shared/javascript/shared_global.js?v=XPgJuNunk65I&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:41 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 154433
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "XPgJuNunk65I"
Cache-Control: public,max-age=15552000
Expires: Sun, 06 Oct 2024 22:37:24 GMT
X-Cache: HIT
CF-Cache-Status: HIT
Age: 925956
Vary: Accept-Encoding
CF-RAY: 87764a202d87b472-HKG
Content-Disposition: inline;filename=f.txt
traceId: 76e18e21-0f69-47a0-8c3d-7fa305f1d899
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english&_cdn=cloudflare

210.74.226.205

200

25 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english&_cdn=cloudflare
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators
Size
25 kB (24657 bytes)
Hash
a52bc800ab6e9df5a05a5153eea29ffb
8661643fcbc7498dd7317d100ec62d1c1c6886ff
57cfaf9b92c98541f769090cd0229a30013cea7cfafc18519ca654bfae29e14e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:41 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 24657
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "pSvIAKtunfWg"
Cache-Control: public,max-age=15552000
Expires: Sun, 29 Sep 2024 09:11:21 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 1579141
Vary: Accept-Encoding
CF-RAY: 87764a245cf885f2-HKG
Content-Disposition: inline;filename=f.txt
traceId: ec08b921-3b23-40c4-9234-34fe6b646bdf
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/global.js?v=PyuRtGtUpR0t&l=english&_cdn=cloudflare

210.74.226.205

200

104 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/global.js?v=PyuRtGtUpR0t&l=english&_cdn=cloudflare
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
ASCII text, with very long lines (9521), with CRLF line terminators
Size
104 kB (103600 bytes)
Hash
0c978858633fdb2c6e1d63ed21f7131b
d9bf7680b8efcd58242a9fb1fbdff175b20362c1
47c2fe5dd6592780e7474b1a99346c2efedf966e7981c4468c38e71273e5726b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/javascript/global.js?v=PyuRtGtUpR0t&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:41 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 103600
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "PyuRtGtUpR0t"
Cache-Control: public,max-age=15552000
Expires: Sun, 22 Sep 2024 22:52:20 GMT
X-Cache: HIT
CF-Cache-Status: HIT
Age: 2134677
Vary: Accept-Encoding
CF-RAY: 87764a14ae0f5def-HKG
Content-Disposition: inline;filename=f.txt
traceId: e06606f7-b781-450d-a1ed-fdc5358ee63e
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&_cdn=cloudflare

210.74.226.205

200

96 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&_cdn=cloudflare
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32086), with CRLF line terminators
Size
96 kB (95790 bytes)
Hash
4dc834d16a0d219d5c2b8a5b814569e4
4fbe0563917d6f6289e4e1b4a0a8758e4e43bda9
91222f96f34735ebc88df208017e54d4329b9202e3e52367fb8b149698a1a5ef

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:41 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 95790
Connection: keep-alive
Last-Modified: Fri, 05 Jan 2018 01:34:51 GMT
ETag: ".isFTSRckeNhC"
Cache-Control: public,max-age=15552000
Expires: Sat, 31 Aug 2024 21:24:48 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 4040731
Vary: Accept-Encoding
CF-RAY: 87764a15caa65096-HKG
Content-Disposition: inline;filename=f.txt
traceId: fb7c5821-1023-427b-a22e-917167e56223
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&_cdn=cloudflare

210.74.226.205

200

169 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&_cdn=cloudflare
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
169 kB (169399 bytes)
Hash
6a39e0b509fecb928d47b8a2643fed2a
f67fa6cb1d09963d10ba117d6553c8e7d5bc7863
d8bdea7fff893dbdbeaf6c2affec091a77483b9ec10e7958486bc3b6cc170c96

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:40 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 169399
Connection: keep-alive
Last-Modified: Fri, 05 Jan 2018 01:34:51 GMT
ETag: ".55t44gwuwgvw"
Cache-Control: public,max-age=15552000
Expires: Sat, 31 Aug 2024 14:35:53 GMT
X-Cache: HIT
CF-Cache-Status: HIT
Age: 4051107
Vary: Accept-Encoding
CF-RAY: 87764a168c1020f6-HKG
Content-Disposition: inline;filename=f.txt
traceId: 5520cb7a-e3f2-41f2-b313-2a0e90581042
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/applications/community/main.css?v=EyWBqDQS-6jg&l=english&_cdn=cloudflare

210.74.226.205

200

120 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/applications/community/main.css?v=EyWBqDQS-6jg&l=english&_cdn=cloudflare
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
ASCII text, with very long lines (26986), with CRLF, LF line terminators
Size
120 kB (120179 bytes)
Hash
132581a83412fba8e0fc7e66a84b6ffb
5586269078c874f74b513b2b6aa29ffd2fa8f57e
8ea529711fbd58d915bae3c1905b0676fe1464c2173620576a3e188273e502b0

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/css/applications/community/main.css?v=EyWBqDQS-6jg&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:41 GMT
Content-Type: text/css;charset=UTF-8
Content-Length: 120179
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "EyWBqDQS-6jg"
Cache-Control: public,max-age=15552000
Expires: Sun, 20 Oct 2024 23:31:23 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 83
Vary: Accept-Encoding
CF-RAY: 8791a79efdbd20ea-HKG
Content-Disposition: inline;filename=f.txt
traceId: eaac1cf3b017139151665482129d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/manifest.js?v=EL8POrEv0mo4&l=english&_cdn=cloudflare

210.74.226.205

200

16 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/manifest.js?v=EL8POrEv0mo4&l=english&_cdn=cloudflare
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (15579), with CRLF, LF line terminators
Size
16 kB (15747 bytes)
Hash
35b856e0906a2c42857273aa4a00da0d
142966cf9f6481597391a4b7783003d54b50f8f4
846f92ea33a2ab91d45abdbc1a54397ed4a791c8f90f01bd41c4c3b5172b6900

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/javascript/applications/community/manifest.js?v=EL8POrEv0mo4&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:41 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 15747
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "EL8POrEv0mo4"
Cache-Control: public,max-age=15552000
Expires: Tue, 22 Oct 2024 17:02:34 GMT
X-Cache: HIT
CF-Cache-Status: HIT
Age: 738
Vary: Accept-Encoding
CF-RAY: 879ff92a3c0550a0-HKG
Content-Disposition: inline;filename=f.txt
traceId: 7dea828b-b4fb-47bb-b1f7-484b70d65c32
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/login.js?v=Vbm1kuHoXmMB&l=english&_cdn=cloudflare

210.74.226.205

200

61 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/shared/javascript/login.js?v=Vbm1kuHoXmMB&l=english&_cdn=cloudflare
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (24693), with CRLF line terminators
Size
61 kB (60801 bytes)
Hash
ef11753c6bebc072d74ad07c1840b570
5b880bd5f28e92a241dd47ada7390f2056d1aee0
17ca48fcf3691c74ac48283a07c68cd198a61114afda5d4d751ac7cd9780403d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/shared/javascript/login.js?v=Vbm1kuHoXmMB&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:41 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 60801
Connection: keep-alive
Last-Modified: Mon, 13 Apr 1970 09:29:21 GMT
ETag: "gYtbaAKt6bwQ"
Cache-Control: public,max-age=0,must-revalidate
Expires: Sun, 09 Sep 2001 01:46:40 GMT
X-Cache: MISS
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
CF-RAY: 87a21f50ebe90451-HKG
Content-Disposition: inline;filename=f.txt
traceId: 36b8ec7c-92ff-490a-b184-1d8f472b2e4d
Strict-Transport-Security: max-age=15724800; includeSubDomains

community.cloudflare.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1

172.64.145.151

200 OK

291 B

URL GET HTTP/2
community.cloudflare.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1
IP
172.64.145.151:443
ASN
#13335 CLOUDFLARENET

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerLet's Encrypt
Subjectcloudflare.steamstatic.com
Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35
ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT

File type
PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Size
291 B (291 bytes)
Hash
a2796187c58c7e948159e37d6990ecc2
4209cd85add507247f9ce5a87a8c9095b54ee417
23341256db7f44b1f3811880fa2bae6b7748bbf6b62c544a162e38cf0d5c5082

HTTP Headers

GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 23:30:42 GMT
content-type: image/png
content-length: 291
last-modified: Wed, 21 Mar 2018 00:07:17 GMT
etag: "5ab1a235-123"
x-cache: MISS
cf-cache-status: HIT
age: 3625
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a21f56f8e0b52d-OSL
X-Firefox-Spdy: h2

community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015

172.64.145.151

200 OK

123 kB

URL GET HTTP/2
community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
IP
172.64.145.151:443
ASN
#13335 CLOUDFLARENET

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerLet's Encrypt
Subjectcloudflare.steamstatic.com
Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35
ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT

File type
TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;MotivaSan
Size
123 kB (122684 bytes)
Hash
57613e143ff3dae10f282e84a066de28
88756cc8c6db645b5f20aa17b14feefb4411c25f
19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14

HTTP Headers

GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://st.aircsgo.com
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 23:30:42 GMT
content-type: application/octet-stream
content-length: 122684
last-modified: Tue, 28 Jul 2020 23:16:28 GMT
etag: "5f20b1cc-1df3c"
access-control-allow-origin: *
x-cache: MISS
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a21f5708e1b52d-OSL
X-Firefox-Spdy: h2

community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015

172.64.145.151

200 OK

124 kB

URL GET HTTP/2
community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
IP
172.64.145.151:443
ASN
#13335 CLOUDFLARENET

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerLet's Encrypt
Subjectcloudflare.steamstatic.com
Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35
ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT

File type
TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaSans
Size
124 kB (124048 bytes)
Hash
2d64caa5ecbf5e42cbb766ca4d85e90e
147420abceb4a7fd7e486dddcfe68cda7ebb3a18
045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f

HTTP Headers

GET /public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://st.aircsgo.com
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 23:30:42 GMT
content-type: application/octet-stream
content-length: 124048
last-modified: Tue, 28 Jul 2020 23:16:28 GMT
etag: "5f20b1cc-1e490"
access-control-allow-origin: *
x-cache: MISS
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a21f5708e4b52d-OSL
X-Firefox-Spdy: h2

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/main.js?v=c4UneKQJS7M3&l=english&_cdn=cloudflare

210.74.226.205

200

588 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/main.js?v=c4UneKQJS7M3&l=english&_cdn=cloudflare
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65368), with CRLF, LF line terminators
Size
588 kB (587803 bytes)
Hash
fc6617689197d4f7796e8a057de98244
2288e9052bb195bdf1fdbd63cdf09182b2f347ed
8b97e93a1f1e87bd51fde3483cb8aa88bae028b77a9e89516472f9978e23bb8c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/javascript/applications/community/main.js?v=c4UneKQJS7M3&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:41 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 587803
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "c4UneKQJS7M3"
Cache-Control: public,max-age=15552000
Expires: Sun, 20 Oct 2024 23:31:19 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 87
Vary: Accept-Encoding
CF-RAY: 8791a7a1daf3095a-HKG
Content-Disposition: inline;filename=f.txt
traceId: df663afd-7c0b-4fb5-9f4b-c7f39c47b04a
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/libraries~b28b7af69.js?v=VGtvPLNviurP&l=english&_cdn=cloudflare

210.74.226.205

200

927 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/libraries~b28b7af69.js?v=VGtvPLNviurP&l=english&_cdn=cloudflare
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65368), with CRLF, LF line terminators
Size
927 kB (926675 bytes)
Hash
aaa2b4c9a67fb3338514be5552fa9203
8315a289e5509a42cc87ff670cf6d155f1bb44a6
1bde7c2c72c06b16f9c35712fc269da2ab6d6ca2b1dc8a50787c35f189933c0e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/javascript/applications/community/libraries~b28b7af69.js?v=VGtvPLNviurP&l=english&_cdn=cloudflare HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:41 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 926675
Connection: keep-alive
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
ETag: "VGtvPLNviurP"
Cache-Control: public,max-age=15552000
Expires: Sun, 06 Oct 2024 22:37:44 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 925957
Vary: Accept-Encoding
CF-RAY: 87764a252eb085f2-HKG
Content-Disposition: inline;filename=f.txt
traceId: 42ea7bdd-4e72-4ab5-85b2-76e64bc7cbfc
Strict-Transport-Security: max-age=15724800; includeSubDomains
Accept-Ranges: bytes

community.cloudflare.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg

172.64.145.151

200 OK

124 kB

URL GET HTTP/2
community.cloudflare.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg
IP
172.64.145.151:443
ASN
#13335 CLOUDFLARENET

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerLet's Encrypt
Subjectcloudflare.steamstatic.com
Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35
ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Size
124 kB (124529 bytes)
Hash
48b805d8fa321668db4ce8dfd96db5b9
e0ded2606559c8100ef544c1f1c704e878a29b92
9a75f8cc40bbe9c9499e7b2d3bab98a447685a361489357a111479517005c954

HTTP Headers

GET /public/shared/images/joinsteam/new_login_bg_strong_mask.jpg HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 23:30:42 GMT
content-type: image/jpeg
content-length: 124529
cf-bgj: h2pri
etag: "63056bdf-1e671"
last-modified: Wed, 24 Aug 2022 00:07:59 GMT
x-cache: MISS
cf-cache-status: HIT
age: 3469
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a21f5a9a5eb52d-OSL
X-Firefox-Spdy: h2

community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Black.ttf?v=4.015

172.64.145.151

200 OK

121 kB

URL GET HTTP/2
community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Black.ttf?v=4.015
IP
172.64.145.151:443
ASN
#13335 CLOUDFLARENET

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerLet's Encrypt
Subjectcloudflare.steamstatic.com
Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35
ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT

File type
TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansBlack4.015;Plau;MotivaSans-
Size
121 kB (120816 bytes)
Hash
4f7c668ae0988bf759b831769bfd0335
280a11e29d10bb78d6a5b4a1f512bf3c05836e34
32d4c8dc451e11db315d047306feea0376fbdc3a77c0ab8f5a8ab154164734d1

HTTP Headers

GET /public/shared/fonts/MotivaSans-Black.ttf?v=4.015 HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://st.aircsgo.com
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 23:30:43 GMT
content-type: application/octet-stream
content-length: 120816
last-modified: Tue, 28 Jul 2020 23:16:27 GMT
etag: "5f20b1cb-1d7f0"
access-control-allow-origin: *
x-cache: MISS
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a21f5aaa60b52d-OSL
X-Firefox-Spdy: h2

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/localization/shared_english-json.js?contenthash=5ecf6a2294724519e96b

210.74.226.205

200

186 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/localization/shared_english-json.js?contenthash=5ecf6a2294724519e96b
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65253), with CRLF, LF line terminators
Size
186 kB (186349 bytes)
Hash
4ff2db6f1547ca0a1f0334b98300af26
da73d11eab8701db977543717d5fc279fa9bb12a
70df8238fa0019c4c0dbf4eddc715eb05b0a195ce72ccde4d8f930855cfe88fb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/javascript/applications/community/localization/shared_english-json.js?contenthash=5ecf6a2294724519e96b HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:43 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 23 Apr 2024 23:29:53 GMT
ETag: W/"2n42joPoAF7E"
Cache-Control: public,max-age=259200,must-revalidate
Expires: Fri, 26 Apr 2024 23:31:05 GMT
Edge-Control: !no-store,!bypass-cache,max-age=259200
X-Cache: HIT
CF-Cache-Status: HIT
Age: 41
Vary: Accept-Encoding
CF-RAY: 8791a653396e095a-HKG
Content-Disposition: inline;filename=f.txt
traceId: 032ed6aa-39cd-4fbb-9b7f-074eb6136fef
Strict-Transport-Security: max-age=15724800; includeSubDomains

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/localization/sales_english-json.js?contenthash=78c2664709aeddc975e5

210.74.226.205

200

172 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/localization/sales_english-json.js?contenthash=78c2664709aeddc975e5
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (64901), with CRLF, LF line terminators
Size
172 kB (171845 bytes)
Hash
e099d2588434045a112d2d874b2fa43c
6aeb98a544e3e6a63e90cd7a1b16d616a4d84ea5
5ab7d9b773379ec8bb4514251830670c4c21b8bae4fc36766822b5b110ac386b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/javascript/applications/community/localization/sales_english-json.js?contenthash=78c2664709aeddc975e5 HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:43 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 17 Apr 2024 23:43:35 GMT
ETag: W/"U2Px6UXjBWDe"
Cache-Control: public,max-age=259200,must-revalidate
Expires: Sun, 21 Apr 2024 19:49:26 GMT
Edge-Control: !no-store,!bypass-cache,max-age=259200
X-Cache: HIT
CF-Cache-Status: HIT
Age: 236354
Vary: Accept-Encoding
CF-RAY: 878f8ccd9ab18b4b-HKG
Content-Disposition: inline;filename=f.txt
traceId: 56ae7eb9-c253-4a77-a2fc-07694e054b73
Strict-Transport-Security: max-age=15724800; includeSubDomains

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/localization/main_english-json.js?contenthash=3c031c8e5ba8767bb473

210.74.226.205

200

217 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/localization/main_english-json.js?contenthash=3c031c8e5ba8767bb473
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65355), with CRLF, LF line terminators
Size
217 kB (216961 bytes)
Hash
e0dd0bf97735f086cb20a509bad241d6
a7036a85fca0509570636fa43e7f22122985eac3
003cdeedbb65d2fffc9eae4d02a37317c8dbc764d0b9cdd0a0ea7e8c1a7dff24

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/javascript/applications/community/localization/main_english-json.js?contenthash=3c031c8e5ba8767bb473 HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:43 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 25 Apr 2024 17:01:34 GMT
ETag: W/"dIORcTAkNn8X"
Cache-Control: public,max-age=259200,must-revalidate
Expires: Sun, 28 Apr 2024 17:02:50 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 753
Vary: Accept-Encoding
CF-RAY: 879ff9968c7f50a0-HKG
Content-Disposition: inline;filename=f.txt
traceId: 06cee6db-1d9e-4159-a8eb-638bcb9b12c0
Strict-Transport-Security: max-age=15724800; includeSubDomains

st.aircsgo.com/favicon.ico

210.74.226.205

200

39 kB

URL GET HTTP/1.1
st.aircsgo.com/favicon.ico
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Size
39 kB (38554 bytes)
Hash
231913fdebabcbe65f4b0052372bde56
553909d080e4f210b64dc73292f3a111d5a0781f
9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac; timezoneOffset=0,0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:43 GMT
Content-Type: image/x-icon
Content-Length: 38554
Connection: keep-alive
Last-Modified: Tue, 18 Sep 2018 23:32:59 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Method: *
Access-Control-Allow-Methods: POST, GET, HEAD, OPTIONS
Access-Control-Allow-Origin: https://st.aircsgo.com
Access-Control-Expose-Headers: X-eresult,X-error_message
Cache-Control: public,max-age=86400
Expires: Mon, 16 Oct 2023 17:28:08 GMT
Origin: https://st.aircsgo.com
Set-Cookie: uid=de6c244f-3062-4ce3-907e-ff63dff652ac; Path=/; Domain=st.aircsgo.com
X-Proxy-Hostname: steam-session-cluster-6c6fc676d6-8qbg7
traceId: eaac1cf3af17140878435705206d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/chunk~906a41d8e.js?contenthash=bc65a674fca36dfbad5e

210.74.226.205

200

18 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/chunk~906a41d8e.js?contenthash=bc65a674fca36dfbad5e
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (17427), with CRLF, LF line terminators
Size
18 kB (17595 bytes)
Hash
cb6f54ce456e92e1ad708f342076b397
0e979d48ffc37e4981327e398480573e78f9443a
95be3d0fcac5633fc039aba02f42ea683c2da8a926c845e399e90ca19df43f94

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/javascript/applications/community/chunk~906a41d8e.js?contenthash=bc65a674fca36dfbad5e HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:43 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 17 Apr 2024 23:43:35 GMT
ETag: W/"EMncs5O5KwPb"
Cache-Control: public,max-age=259200,must-revalidate
Expires: Tue, 23 Apr 2024 23:45:43 GMT
Edge-Control: !no-store,!bypass-cache,max-age=259200
X-Cache: HIT
CF-Cache-Status: HIT
Age: 236354
Vary: Accept-Encoding
CF-RAY: 878f8cd1be8d048d-HKG
Content-Disposition: inline;filename=f.txt
traceId: ccdfbad7-fa90-4ce8-b9ba-98140a584871
Strict-Transport-Security: max-age=15724800; includeSubDomains

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/libraries~f036ce556.js?contenthash=4aeaa7f3e9a9fc232310

210.74.226.205

200

90 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/libraries~f036ce556.js?contenthash=4aeaa7f3e9a9fc232310
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65368), with CRLF, LF line terminators
Size
90 kB (90126 bytes)
Hash
00980fbe21d99d69334e7c3fdfd18e25
84cebab4a14e0db8465af1a88ccb0d38399cb3be
b41656f3ffaea7983c4735caae7cbee7f3ed324b48d271045fe959dd1a4343c1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/javascript/applications/community/libraries~f036ce556.js?contenthash=4aeaa7f3e9a9fc232310 HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:43 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 17 Apr 2024 23:43:34 GMT
ETag: W/"zMcnvrKcq8yZ"
Cache-Control: public,max-age=259200,must-revalidate
Expires: Tue, 23 Apr 2024 23:46:04 GMT
Edge-Control: !no-store,!bypass-cache,max-age=259200
X-Cache: HIT
CF-Cache-Status: HIT
Age: 230662
Vary: Accept-Encoding
CF-RAY: 878f025cefb71111-HKG
Content-Disposition: inline;filename=f.txt
traceId: 257a4427-104f-4f25-9aaf-c4c5f1ddd6b4
Strict-Transport-Security: max-age=15724800; includeSubDomains

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/applications/community/login.css?contenthash=a66289e969ece5d1faad

210.74.226.205

200

229 B

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/applications/community/login.css?contenthash=a66289e969ece5d1faad
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
ASCII text, with CRLF, LF line terminators
Size
229 B (229 bytes)
Hash
765173ac8de1cce3cadf7aa1ab36cfc0
8e18b33836c896184f3707a99be446cd30e4bf59
4bc34175da3bcdbdfb64489ee946dd77beeee5505349243f12a44766dc5217af

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/css/applications/community/login.css?contenthash=a66289e969ece5d1faad HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac; timezoneOffset=0,0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:43 GMT
Content-Type: text/css;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 17 Apr 2024 23:43:34 GMT
ETag: W/"GrUtQabOSHsW"
Cache-Control: public,max-age=259200,must-revalidate
Expires: Sat, 27 Apr 2024 01:17:02 GMT
Edge-Control: !no-store,!bypass-cache,max-age=259200
X-Cache: HIT
CF-Cache-Status: HIT
Age: 129823
Vary: Accept-Encoding
CF-RAY: 879ea1dbf92d07a5-HKG
Content-Disposition: inline;filename=f.txt
traceId: eaac1cf3ac17140512454308613d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/login.js?contenthash=3f5d4d1eea08fcdfe1a3

210.74.226.205

200

845 B

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/login.js?contenthash=3f5d4d1eea08fcdfe1a3
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (677), with CRLF, LF line terminators
Size
845 B (845 bytes)
Hash
11c26fd8c339b00d1ef9b8babfd04768
4800d5bb400d3e4c8b6aa6a9952e4c7a05d82375
913a32237f68d3f605a9ce8633b6e2c4db36c180af8c1f3adc117e0ea1580f35

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/javascript/applications/community/login.js?contenthash=3f5d4d1eea08fcdfe1a3 HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:43 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 17 Apr 2024 23:43:35 GMT
ETag: W/"34GAzMeymb_o"
Cache-Control: public,max-age=259200,must-revalidate
Expires: Fri, 26 Apr 2024 23:49:20 GMT
Edge-Control: !no-store,!bypass-cache,max-age=259200
X-Cache: HIT
CF-Cache-Status: HIT
Age: 135084
Vary: Accept-Encoding
CF-RAY: 879ea1dc1e07105b-HKG
Content-Disposition: inline;filename=f.txt
traceId: c904aae7-f8e5-4969-af7f-196ce2b5a32c
Strict-Transport-Security: max-age=15724800; includeSubDomains

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/applications/community/chunk~f036ce556.css?contenthash=65008c72e7e5586e0c2d

210.74.226.205

200

31 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/css/applications/community/chunk~f036ce556.css?contenthash=65008c72e7e5586e0c2d
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
ASCII text, with very long lines (19112), with CRLF, LF line terminators
Size
31 kB (30770 bytes)
Hash
668d9b56f55f6d79ddd295267b68518a
ad521277e7ba515feee28e4fb3cd62afdb6ca218
ddc12eff57a9e957968af6b2b8619545dd26f3fec3d85c4c607e5d0560fed7d5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/css/applications/community/chunk~f036ce556.css?contenthash=65008c72e7e5586e0c2d HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac; timezoneOffset=0,0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:43 GMT
Content-Type: text/css;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 17 Apr 2024 23:43:35 GMT
ETag: W/"x8Yg4STls09_"
Cache-Control: public,max-age=259200,must-revalidate
Expires: Tue, 23 Apr 2024 23:46:05 GMT
Edge-Control: !no-store,!bypass-cache,max-age=259200
X-Cache: HIT
CF-Cache-Status: HIT
Age: 230661
Vary: Accept-Encoding
CF-RAY: 878f025cfd2c10c9-HKG
Content-Disposition: inline;filename=f.txt
traceId: eaac1cf3ae17138874260701683d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/navevents.js?contenthash=637ad4060aaa08d3ae85

210.74.226.205

200

14 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/navevents.js?contenthash=637ad4060aaa08d3ae85
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (14143), with CRLF, LF line terminators
Size
14 kB (14311 bytes)
Hash
2d823c7e07736ed93735a205fde2567a
056181e2a7f57a7dc46d65e66189e8f44156afc9
f402cfc53c8a3924955d0de30f3d3a23f37ec72ca68292f00669be9dea3e61d6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/javascript/applications/community/navevents.js?contenthash=637ad4060aaa08d3ae85 HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:43 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 17 Apr 2024 23:43:35 GMT
ETag: W/"MsgvU2O4ZYEo"
Cache-Control: public,max-age=259200,must-revalidate
Expires: Tue, 23 Apr 2024 23:45:44 GMT
X-Cache: MISS
CF-Cache-Status: HIT
Age: 236353
Vary: Accept-Encoding
CF-RAY: 878f8cd30f0b5167-HKG
Content-Disposition: inline;filename=f.txt
traceId: d0ac5baf-9745-4c04-9627-4979b64b3bb9
Strict-Transport-Security: max-age=15724800; includeSubDomains

st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/chunk~f036ce556.js?contenthash=2ce1adc8a382f77bdf57

210.74.226.205

200

89 kB

URL GET HTTP/1.1
st.aircsgo.com/community-cloudflare-steamstatic-com/js/public/javascript/applications/community/chunk~f036ce556.js?contenthash=2ce1adc8a382f77bdf57
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65366), with CRLF, LF line terminators
Size
89 kB (88814 bytes)
Hash
f08ed755ce667d4afb0a2a95befde1d3
a479b356f3017d7bbe3955cacb73ac2320f134bf
c5895019e18a159f82c432c043ad7dea5235365a4026767f8fac7d76f4b25c76

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /community-cloudflare-steamstatic-com/js/public/javascript/applications/community/chunk~f036ce556.js?contenthash=2ce1adc8a382f77bdf57 HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac; timezoneOffset=0,0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:43 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 17 Apr 2024 23:43:35 GMT
ETag: W/"sRCTFvr5PRbP"
Cache-Control: public,max-age=259200,must-revalidate
Expires: Mon, 22 Apr 2024 11:21:32 GMT
Edge-Control: !no-store,!bypass-cache,max-age=259200
X-Cache: HIT
CF-Cache-Status: HIT
Age: 230657
Vary: Accept-Encoding
CF-RAY: 878f02617db584eb-HKG
Content-Disposition: inline;filename=f.txt
traceId: 32daad67-113c-427b-9dc2-fff63cddbf4e
Strict-Transport-Security: max-age=15724800; includeSubDomains

st.aircsgo.com/steamlogin/jwt/ajaxrefresh

210.74.226.205

200

28 B

URL POST HTTP/1.1
st.aircsgo.com/steamlogin/jwt/ajaxrefresh
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
JSON text data
Size
28 B (28 bytes)
Hash
b6eba0b6a257c7225bc3b8ce1a80d0ef
fdcf96d96483272ca0b622e917e581e5fd202c48
f3156716f54db738fbbf203495f9f0dae5de30bcf4c46855422f9525fea9752a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /steamlogin/jwt/ajaxrefresh HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------39610309744012900739478516301
Content-Length: 680
Origin: https://st.aircsgo.com
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac; timezoneOffset=0,0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:45 GMT
Content-Type: application/json;charset=utf-8
Content-Length: 28
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Method: *
Access-Control-Allow-Methods: POST, GET, HEAD, OPTIONS
Access-Control-Allow-Origin: https://st.aircsgo.com
Access-Control-Expose-Headers: X-eresult,X-error_message
Access-Control-Max-Age: 604800
Origin: https://st.aircsgo.com
Set-Cookie: ak_bmsc=AD091E23608F75A44F211BDBA1E44142~000000000000000000000000000000~YAAQNSZzaD3lk82OAQAAtNyYFxfRkxsttQv/K5KED9FM55/SV/FSYvc0fM2kpW/97Qd5i1VPjYbdGKEG9vT6Jari3eBRJ+BJM+1j+RYn+JNbaeR3FWGbfREnrxRj/yrfJ+JZ75CsKwNUXrIgvTYhuXm0fYIOcZ36reripQzlT446xoFPDoSAj/aejB9qypsay3bYukfSPotok5Ox7osj/7fikfE1FsgK6OzVgi9JKpaSYeeFUKnexTWsl7N3mWF/WMVeQzz24e1g9jnOI3MTldcw+aVIaA92O0yAhgceoZ/4hCdXFyPS82ksWmbLa8nLxLgUpa0A7GTntLDTDfI9ODI1Q0ZE+KD2MfaSpWxcs8o3/K+xeAJIiFcKmk4Xv3OKlQ==; Domain=.steampowered.com; Path=/; Expires=Fri, 26 Apr 2024 01:30:44 GMT; Max-Age=7199; HttpOnly;Domain=st.aircsgo.com
uid=de6c244f-3062-4ce3-907e-ff63dff652ac; Path=/; Domain=st.aircsgo.com
Strict-Transport-Security: max-age=15724800; includeSubDomains
X-Proxy-Hostname: steam-session-cluster-6c6fc676d6-8qbg7
traceId: eaac1cf3ae17140878447265225d0001

st.aircsgo.com/steamapi/IAuthenticationService/BeginAuthSessionViaQR/v1

210.74.226.205

200

85 B

URL POST HTTP/1.1
st.aircsgo.com/steamapi/IAuthenticationService/BeginAuthSessionViaQR/v1
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
data
Size
85 B (85 bytes)
Hash
2e2608d30a9786cf6bb1eca7f3284421
1517b31add1b2f759116e2ae93f91dcd62c0f4b3
a24d1df979d600aae27e50032530a658c35056da32315725113f385a04017e20

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /steamapi/IAuthenticationService/BeginAuthSessionViaQR/v1 HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------200981346536008661663288112237
Content-Length: 307
Origin: https://st.aircsgo.com
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac; timezoneOffset=0,0; ak_bmsc=AD091E23608F75A44F211BDBA1E44142~000000000000000000000000000000~YAAQNSZzaD3lk82OAQAAtNyYFxfRkxsttQv/K5KED9FM55/SV/FSYvc0fM2kpW/97Qd5i1VPjYbdGKEG9vT6Jari3eBRJ+BJM+1j+RYn+JNbaeR3FWGbfREnrxRj/yrfJ+JZ75CsKwNUXrIgvTYhuXm0fYIOcZ36reripQzlT446xoFPDoSAj/aejB9qypsay3bYukfSPotok5Ox7osj/7fikfE1FsgK6OzVgi9JKpaSYeeFUKnexTWsl7N3mWF/WMVeQzz24e1g9jnOI3MTldcw+aVIaA92O0yAhgceoZ/4hCdXFyPS82ksWmbLa8nLxLgUpa0A7GTntLDTDfI9ODI1Q0ZE+KD2MfaSpWxcs8o3/K+xeAJIiFcKmk4Xv3OKlQ==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:45 GMT
Content-Type: application/octet-stream
Content-Length: 85
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Method: *
Access-Control-Allow-Methods: POST, GET, HEAD, OPTIONS
Access-Control-Allow-Origin: https://st.aircsgo.com
Access-Control-Expose-Headers: X-eresult,X-error_message
Expires: Thu, 25 Apr 2024 23:30:45 GMT
Origin: https://st.aircsgo.com
Set-Cookie: uid=de6c244f-3062-4ce3-907e-ff63dff652ac; Path=/; Domain=st.aircsgo.com
Vary: Origin
X-eresult: 1
X-Proxy-Hostname: steam-session-cluster-6c6fc676d6-8qbg7
traceId: eaac1cf3b017140878454435140d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains

st.aircsgo.com/steamapi/IAuthenticationService/PollAuthSessionStatus/v1

210.74.226.205

200

2 B

URL POST HTTP/1.1
st.aircsgo.com/steamapi/IAuthenticationService/PollAuthSessionStatus/v1
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
data
Size
2 B (2 bytes)
Hash
e9f962233595f8a9eaceb6e5d490a15c
a3dfc0c77acade0ee48dcc73e795a597d0270a73
e4ab5012eff32a5171b3672b59d29950fe8b3dcb4d2dadf971ebbcbc2fbb0d41

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /steamapi/IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------407215588916794052241239314018
Content-Length: 231
Origin: https://st.aircsgo.com
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac; timezoneOffset=0,0; ak_bmsc=AD091E23608F75A44F211BDBA1E44142~000000000000000000000000000000~YAAQNSZzaD3lk82OAQAAtNyYFxfRkxsttQv/K5KED9FM55/SV/FSYvc0fM2kpW/97Qd5i1VPjYbdGKEG9vT6Jari3eBRJ+BJM+1j+RYn+JNbaeR3FWGbfREnrxRj/yrfJ+JZ75CsKwNUXrIgvTYhuXm0fYIOcZ36reripQzlT446xoFPDoSAj/aejB9qypsay3bYukfSPotok5Ox7osj/7fikfE1FsgK6OzVgi9JKpaSYeeFUKnexTWsl7N3mWF/WMVeQzz24e1g9jnOI3MTldcw+aVIaA92O0yAhgceoZ/4hCdXFyPS82ksWmbLa8nLxLgUpa0A7GTntLDTDfI9ODI1Q0ZE+KD2MfaSpWxcs8o3/K+xeAJIiFcKmk4Xv3OKlQ==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:51 GMT
Content-Type: application/octet-stream
Content-Length: 2
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Method: *
Access-Control-Allow-Methods: POST, GET, HEAD, OPTIONS
Access-Control-Allow-Origin: https://st.aircsgo.com
Access-Control-Expose-Headers: X-eresult,X-error_message
Expires: Thu, 25 Apr 2024 23:30:51 GMT
Origin: https://st.aircsgo.com
Set-Cookie: uid=de6c244f-3062-4ce3-907e-ff63dff652ac; Path=/; Domain=st.aircsgo.com
Vary: Origin
X-eresult: 1
X-Proxy-Hostname: steam-session-cluster-6c6fc676d6-8qbg7
traceId: eaac1cf3b017140878511465162d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains

st.aircsgo.com/steamapi/IClientMetricsService/ReportClientError/v1

210.74.226.205

200

0 B

URL POST HTTP/1.1
st.aircsgo.com/steamapi/IClientMetricsService/ReportClientError/v1
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /steamapi/IClientMetricsService/ReportClientError/v1 HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------160812695319489617492868313281
Content-Length: 5623
Origin: https://st.aircsgo.com
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac; timezoneOffset=0,0; ak_bmsc=AD091E23608F75A44F211BDBA1E44142~000000000000000000000000000000~YAAQNSZzaD3lk82OAQAAtNyYFxfRkxsttQv/K5KED9FM55/SV/FSYvc0fM2kpW/97Qd5i1VPjYbdGKEG9vT6Jari3eBRJ+BJM+1j+RYn+JNbaeR3FWGbfREnrxRj/yrfJ+JZ75CsKwNUXrIgvTYhuXm0fYIOcZ36reripQzlT446xoFPDoSAj/aejB9qypsay3bYukfSPotok5Ox7osj/7fikfE1FsgK6OzVgi9JKpaSYeeFUKnexTWsl7N3mWF/WMVeQzz24e1g9jnOI3MTldcw+aVIaA92O0yAhgceoZ/4hCdXFyPS82ksWmbLa8nLxLgUpa0A7GTntLDTDfI9ODI1Q0ZE+KD2MfaSpWxcs8o3/K+xeAJIiFcKmk4Xv3OKlQ==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:53 GMT
Content-Type: application/json
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Method: *
Access-Control-Allow-Methods: POST, GET, HEAD, OPTIONS
Access-Control-Allow-Origin: https://st.aircsgo.com
Access-Control-Expose-Headers: X-eresult,X-error_message
Cache-Control: max-age=0, no-cache, no-store
Expires: Thu, 25 Apr 2024 23:30:53 GMT
Origin: https://st.aircsgo.com
Pragma: no-cache
Set-Cookie: uid=de6c244f-3062-4ce3-907e-ff63dff652ac; Path=/; Domain=st.aircsgo.com
Vary: Origin
X-Proxy-Hostname: steam-session-cluster-6c6fc676d6-8qbg7
traceId: eaac1cf3ac17140878531956363d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains

st.aircsgo.com/steamapi/IAuthenticationService/PollAuthSessionStatus/v1

210.74.226.205

200

2 B

URL POST HTTP/1.1
st.aircsgo.com/steamapi/IAuthenticationService/PollAuthSessionStatus/v1
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
data
Size
2 B (2 bytes)
Hash
e9f962233595f8a9eaceb6e5d490a15c
a3dfc0c77acade0ee48dcc73e795a597d0270a73
e4ab5012eff32a5171b3672b59d29950fe8b3dcb4d2dadf971ebbcbc2fbb0d41

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /steamapi/IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------9630481452539706400726571914
Content-Length: 227
Origin: https://st.aircsgo.com
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac; timezoneOffset=0,0; ak_bmsc=AD091E23608F75A44F211BDBA1E44142~000000000000000000000000000000~YAAQNSZzaD3lk82OAQAAtNyYFxfRkxsttQv/K5KED9FM55/SV/FSYvc0fM2kpW/97Qd5i1VPjYbdGKEG9vT6Jari3eBRJ+BJM+1j+RYn+JNbaeR3FWGbfREnrxRj/yrfJ+JZ75CsKwNUXrIgvTYhuXm0fYIOcZ36reripQzlT446xoFPDoSAj/aejB9qypsay3bYukfSPotok5Ox7osj/7fikfE1FsgK6OzVgi9JKpaSYeeFUKnexTWsl7N3mWF/WMVeQzz24e1g9jnOI3MTldcw+aVIaA92O0yAhgceoZ/4hCdXFyPS82ksWmbLa8nLxLgUpa0A7GTntLDTDfI9ODI1Q0ZE+KD2MfaSpWxcs8o3/K+xeAJIiFcKmk4Xv3OKlQ==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:30:57 GMT
Content-Type: application/octet-stream
Content-Length: 2
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Method: *
Access-Control-Allow-Methods: POST, GET, HEAD, OPTIONS
Access-Control-Allow-Origin: https://st.aircsgo.com
Access-Control-Expose-Headers: X-eresult,X-error_message
Expires: Thu, 25 Apr 2024 23:30:57 GMT
Origin: https://st.aircsgo.com
Set-Cookie: uid=de6c244f-3062-4ce3-907e-ff63dff652ac; Path=/; Domain=st.aircsgo.com
Vary: Origin
X-eresult: 1
X-Proxy-Hostname: steam-session-cluster-6c6fc676d6-8qbg7
traceId: eaac1cf3af17140878568475251d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains

st.aircsgo.com/steamapi/IAuthenticationService/PollAuthSessionStatus/v1

210.74.226.205

200

2 B

URL POST HTTP/1.1
st.aircsgo.com/steamapi/IAuthenticationService/PollAuthSessionStatus/v1
IP
210.74.226.205:443
ASN
#4812 China Telecom Group

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerDigiCert Inc
Subjectst.aircsgo.com
Fingerprint8E:BA:4D:98:E2:44:A9:DA:79:DE:48:AC:B5:B2:2D:44:5D:48:38:BC
ValiditySat, 20 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT

File type
data
Size
2 B (2 bytes)
Hash
e9f962233595f8a9eaceb6e5d490a15c
a3dfc0c77acade0ee48dcc73e795a597d0270a73
e4ab5012eff32a5171b3672b59d29950fe8b3dcb4d2dadf971ebbcbc2fbb0d41

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Steam
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /steamapi/IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1
Host: st.aircsgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------29852874120478785984016438689
Content-Length: 229
Origin: https://st.aircsgo.com
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Cookie: sessionid=693c06ef9f0668d69947b3e8; steamCountry=HK%7C99db6318fbf86db9c72b5786235c03ce; uid=de6c244f-3062-4ce3-907e-ff63dff652ac; timezoneOffset=0,0; ak_bmsc=AD091E23608F75A44F211BDBA1E44142~000000000000000000000000000000~YAAQNSZzaD3lk82OAQAAtNyYFxfRkxsttQv/K5KED9FM55/SV/FSYvc0fM2kpW/97Qd5i1VPjYbdGKEG9vT6Jari3eBRJ+BJM+1j+RYn+JNbaeR3FWGbfREnrxRj/yrfJ+JZ75CsKwNUXrIgvTYhuXm0fYIOcZ36reripQzlT446xoFPDoSAj/aejB9qypsay3bYukfSPotok5Ox7osj/7fikfE1FsgK6OzVgi9JKpaSYeeFUKnexTWsl7N3mWF/WMVeQzz24e1g9jnOI3MTldcw+aVIaA92O0yAhgceoZ/4hCdXFyPS82ksWmbLa8nLxLgUpa0A7GTntLDTDfI9ODI1Q0ZE+KD2MfaSpWxcs8o3/K+xeAJIiFcKmk4Xv3OKlQ==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx/1.25.4
Date: Thu, 25 Apr 2024 23:31:02 GMT
Content-Type: application/octet-stream
Content-Length: 2
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Method: *
Access-Control-Allow-Methods: POST, GET, HEAD, OPTIONS
Access-Control-Allow-Origin: https://st.aircsgo.com
Access-Control-Expose-Headers: X-eresult,X-error_message
Expires: Thu, 25 Apr 2024 23:31:02 GMT
Origin: https://st.aircsgo.com
Set-Cookie: uid=de6c244f-3062-4ce3-907e-ff63dff652ac; Path=/; Domain=st.aircsgo.com
Vary: Origin
X-eresult: 1
X-Proxy-Hostname: steam-session-cluster-6c6fc676d6-8qbg7
traceId: eaac1cf3ac17140878625376392d0001
Strict-Transport-Security: max-age=15724800; includeSubDomains

community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016

172.64.145.151

200 OK

3.7 kB

URL GET HTTP/2
community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
IP
172.64.145.151:443
ASN
#13335 CLOUDFLARENET

Requested by
https://st.aircsgo.com/login/home/?goto=%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2Flogin%2Fhome%2F%3Fgoto%3D%2Fmy%2Finventory%2F
Certificate
IssuerLet's Encrypt
Subjectcloudflare.steamstatic.com
Fingerprint93:35:92:83:13:20:24:C4:7E:7D:FB:1E:FB:23:34:01:4C:4E:A3:35
ValidityWed, 17 Apr 2024 02:31:33 GMT - Tue, 16 Jul 2024 02:31:32 GMT

File type
SVG Scalable Vector Graphics image
Size
3.7 kB (3684 bytes)
Hash
ca81bf2f0d99757a6f97b0fec3cf5ab5
de4b8d0953809e4687fa45f95092c9c5e92ca146
b83d5a05f79f53d2945fe89bee2239fad2761c2eccee6ad655bbec92a85a80e1

HTTP Headers

GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1
Host: community.cloudflare.steamstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.aircsgo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 25 Apr 2024 23:30:39 GMT
content-type: image/svg+xml
last-modified: Tue, 17 Nov 2020 23:34:54 GMT
etag: W/"5fb45e1e-e64"
access-control-allow-origin: *
x-cache: MISS
cf-cache-status: HIT
age: 3937
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a21f46ca91b52d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (28)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML