usher.ttvnw.net

Domain

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 11, 2026

Last Seen

September 14, 2026

API

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

MISP warninglist: Top 1 000 000 websites from Cisco Umbrella

This indicator was flagged as a false positive by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 2

Infrastructure · 5

Malware trackers · 2

Web search · 2

Related Clusters (1)

Malicious Twitch Extension Leaks OAuth Tokens of 30,000 Users to Russian Bot Service

1d ago·7 sources

Related Entities

Data Breach Malware Germany CWE-200 - Exposure of Sensitive Information JeetBot T1567 - Exfiltration Over Web Service T1176 - Software Extensions T1539 - Steal Web Session Cookie T1557 - Adversary-in-the-Middle T1071.001 - Web Protocols Firefox Mozilla Firefox

usher.ttvnw.net

IOC Validation

Pivot to external tools

Related Clusters (1)

Malicious Twitch Extension Leaks OAuth Tokens of 30,000 Users to Russian Bot Service

Related Articles (3)

Twitch extension with 30K installs exposes users’ OAuth tokens

Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service

Related Entities