Is Recon - FACEIT CS2 Predictor safe?
Recon - FACEIT CS2 Predictor embeds a bearer API secret and sends it with FACEIT match IDs to recon-api.brkovic.dev.
When you browse FACEIT match pages, the extension's content script calls the prediction API at recon-api.brkovic.dev/match/{faceitMatchId}. Each request includes a hardcoded bearer token shipped inside the extension, so the credential is exposed to anyone who installs or inspects the extension.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Recon - FACEIT CS2 Predictor contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- recon-api.brkovic.dev
Recon - FACEIT CS2 Predictor sends data to recon-api.brkovic.dev. No other extension we have analysed sends data here.