| cdn.tailwindcss.com/ |  104.22.20.144 | 302 Found | 407 kB |
IP104.22.20.144:443
Requested byhttps://faceit.streamermode-5vs5.com/auth CertificateIssuerGoogle Trust Services Subjecttailwindcss.com Fingerprint9B:3A:86:B2:34:9A:76:BF:85:6D:3A:86:E6:A9:39:2E:80:33:60:CF ValidityTue, 01 Apr 2025 02:17:40 GMT - Mon, 30 Jun 2025 03:17:37 GMT
Size407 kB (407279 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: cdn.tailwindcss.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faceit.streamermode-5vs5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 08 May 2025 21:04:24 GMT
cache-control: max-age=14400
location: /3.4.16
strict-transport-security: max-age=63072000
x-vercel-cache: MISS
x-vercel-id: cle1::iad1::pcrhv-1746737283128-967ba45f374f
cf-cache-status: HIT
age: 303
vary: Accept-Encoding
server: cloudflare
cf-ray: 93cbe8c71f530b02-OSL
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/play/v19/6aez4K2oVqwIvtU2Hw.woff2 |  142.250.178.67 | 200 OK | 18 kB |
URL GET fonts.gstatic.com/s/play/v19/6aez4K2oVqwIvtU2Hw.woff2 IP142.250.178.67:443
Requested byhttps://faceit.streamermode-5vs5.com/auth CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18088, version 1.0 Hashf4aa2d622725f1af4e132e2bbaeb47ae 20594962b8a024c0cec8d3b3fe8614bea75d5388 d0964aee1973c5818130723f3bf5b8e0b51bf775a5074949c91d815d91f2924f
GET /s/play/v19/6aez4K2oVqwIvtU2Hw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://faceit.streamermode-5vs5.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18088
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 May 2025 13:06:00 GMT
expires: Tue, 05 May 2026 13:06:00 GMT
cache-control: public, max-age=31536000
age: 287905
last-modified: Thu, 24 Aug 2023 20:26:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| tmpanel.live/dglgzxuwuowwllzftqmcpnqfukcadptydcvgioiqjlxwcn |  94.159.108.221 | 200 OK | 55 B |
URL POST tmpanel.live/dglgzxuwuowwllzftqmcpnqfukcadptydcvgioiqjlxwcn IP94.159.108.221:443
Requested byhttps://faceit.streamermode-5vs5.com/auth CertificateIssuerLet's Encrypt Subjecttmpanel.live Fingerprint09:7A:89:C4:F2:47:0C:6C:B8:05:12:34:17:C0:FC:B6:E8:9B:D5:BD ValidityWed, 09 Apr 2025 18:50:46 GMT - Tue, 08 Jul 2025 18:50:45 GMT
Hashcbfe1ff368d233a46b98d2fa13051cd3 a9a2b72e005fac20fa5dc1d81f6a7e0d374cf83e 9a1c9da0afc011d9ca4af5fd62b0794a740a09d84ab27155fe622a19adfb3593
POST /dglgzxuwuowwllzftqmcpnqfukcadptydcvgioiqjlxwcn HTTP/1.1
Host: tmpanel.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 166
Origin: https://faceit.streamermode-5vs5.com
DNT: 1
Connection: keep-alive
Referer: https://faceit.streamermode-5vs5.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Content-Type: application/json; charset=utf-8
Content-Length: 55
ETag: W/"37-qaK3LgBfrCD6XcHYH2p+DTdM+D4"
Date: Thu, 08 May 2025 21:04:26 GMT
Connection: keep-alive
Keep-Alive: timeout=5
|
|
| faceit.streamermode-5vs5.com/favicon.ico |  195.133.88.47 | 200 OK | 5.4 kB |
URL GET faceit.streamermode-5vs5.com/favicon.ico IP195.133.88.47:443 ASN#215540 Global Connectivity Solutions Llp
Requested byhttps://faceit.streamermode-5vs5.com/auth CertificateIssuerLet's Encrypt Subjectfaceit.streamermode-5vs5.com FingerprintDC:9F:C7:53:79:5D:BB:A2:33:AC:ED:08:A0:AF:49:7F:C5:6A:A9:3B ValidityFri, 02 May 2025 20:46:36 GMT - Thu, 31 Jul 2025 20:46:35 GMT
File typeMS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hashd37e8235c4d8033c6a2d4d8060ebe1a0 8a87548dba6a59fb94165c49929cc95494168c3c 35823a6b96d1200ea297d4e0f860fed749dde7e4cac0e120b8a769af64f26c2f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: faceit.streamermode-5vs5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faceit.streamermode-5vs5.com/auth
Cookie: uv=mafuv38k-w34kdv0i
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 08 May 2025 21:04:25 GMT
Content-Type: image/x-icon
Content-Length: 5430
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 12 Jan 2025 05:25:46 GMT
ETag: W/"1536-19458f9af90"
|
|
| faceit.streamermode-5vs5.com/auth | 195.133.88.47 | 200 OK | 26 kB |
URL User Request GET faceit.streamermode-5vs5.com/auth IP195.133.88.47:443 ASN#215540 Global Connectivity Solutions Llp
CertificateIssuerLet's Encrypt Subjectfaceit.streamermode-5vs5.com FingerprintDC:9F:C7:53:79:5D:BB:A2:33:AC:ED:08:A0:AF:49:7F:C5:6A:A9:3B ValidityFri, 02 May 2025 20:46:36 GMT - Thu, 31 Jul 2025 20:46:35 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (782), with CRLF line terminators Hashecffb27cd88d2b0cdb326e2d26c8ab88 e2ebb7ee52996747f9bfdb0c4faeee195f5ba51c 2ca7c34166df77e045a388c1e801e5217a2e7d976ac07ddb96e698a7bb0f9100
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /auth HTTP/1.1
Host: faceit.streamermode-5vs5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 08 May 2025 21:04:23 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
ETag: W/"6646-4uu37lKZZ0f5v9sMT67uGV9bpRw"
Content-Encoding: gzip
|
|
| fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100..900;1,100..900&family=Play:wght@400;700&display=swap | 142.250.178.74 | 200 OK | 8.1 kB |
URL GET fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100..900;1,100..900&family=Play:wght@400;700&display=swap IP142.250.178.74:443
Requested byhttps://faceit.streamermode-5vs5.com/auth CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint06:13:4C:49:F4:23:BB:58:C3:31:41:0E:F9:E0:C5:EF:74:A9:0C:67 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
Hashde3bc7cd3fe59aba23b7e14f204d3599 0fbfa2c84022125f19c848ab56c6c2ef7773feb5 be0f58970edcb76347af07eda67bdc4d7e0bbcd1bff6f5e55a36e9981c124e38
GET /css2?family=Montserrat:ital,wght@0,100..900;1,100..900&family=Play:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faceit.streamermode-5vs5.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 08 May 2025 21:04:24 GMT
date: Thu, 08 May 2025 21:04:24 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| faceit.streamermode-5vs5.com/235qnmts2qfw.js | 195.133.88.47 | 200 OK | 335 kB |
URL GET faceit.streamermode-5vs5.com/235qnmts2qfw.js IP195.133.88.47:443 ASN#215540 Global Connectivity Solutions Llp
Requested byhttps://faceit.streamermode-5vs5.com/auth CertificateIssuerLet's Encrypt Subjectfaceit.streamermode-5vs5.com FingerprintDC:9F:C7:53:79:5D:BB:A2:33:AC:ED:08:A0:AF:49:7F:C5:6A:A9:3B ValidityFri, 02 May 2025 20:46:36 GMT - Thu, 31 Jul 2025 20:46:35 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size335 kB (334896 bytes) Hash8ddc8c2b292bc00a9a40bbc2ebc0f8c3 f2221b024e18ae25474c8a7b034e0039880f131d ded34feb4e792d628a70fcea4dc72f6f510e90141152e4c3541daad05d2b9638
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /235qnmts2qfw.js HTTP/1.1
Host: faceit.streamermode-5vs5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faceit.streamermode-5vs5.com/auth
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 08 May 2025 21:04:24 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 334896
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Thu, 10 Apr 2025 01:59:18 GMT
ETag: W/"51c30-1961d6c48f0"
|
|
| cdn.tailwindcss.com/3.4.16 | 104.22.20.144 | 200 OK | 407 kB |
URL GET cdn.tailwindcss.com/3.4.16 IP104.22.20.144:443
Requested byhttps://faceit.streamermode-5vs5.com/auth CertificateIssuerGoogle Trust Services Subjecttailwindcss.com Fingerprint9B:3A:86:B2:34:9A:76:BF:85:6D:3A:86:E6:A9:39:2E:80:33:60:CF ValidityTue, 01 Apr 2025 02:17:40 GMT - Mon, 30 Jun 2025 03:17:37 GMT
File typeJavaScript source, ASCII text, with very long lines (52853) Size407 kB (407279 bytes) Hash2697bf25afb0982dfa17c73536f934c1 7d7db122d0639cd1f1a53eb6018d6d713d312679 fb798bb21731986940cf3a9950fbca386e03633e9a45497701e71f9b87d132ea
GET /3.4.16 HTTP/1.1
Host: cdn.tailwindcss.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://faceit.streamermode-5vs5.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 08 May 2025 21:04:24 GMT
content-type: text/javascript
cache-control: max-age=31536000
content-encoding: br
strict-transport-security: max-age=63072000
x-vercel-cache: MISS
x-vercel-id: cle1::iad1::gq8lt-1742894374190-208180a60008
last-modified: Tue, 25 Mar 2025 09:19:34 GMT
cf-cache-status: HIT
age: 2393862
vary: Accept-Encoding
server: cloudflare
cf-ray: 93cbe8c76fb20b02-OSL
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/play/v19/6ae84K2oVqwItm4TCpAy2g.woff2 | 142.250.178.67 | 200 OK | 18 kB |
URL GET fonts.gstatic.com/s/play/v19/6ae84K2oVqwItm4TCpAy2g.woff2 IP142.250.178.67:443
Requested byhttps://faceit.streamermode-5vs5.com/auth CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18100, version 1.0 Hash2af0645d8798834a774f014332120c5d c1f9a794c35d75cd3196ec52e457467d33b2405b 42d25e75823f99564c199e3dc486ff8562ce77625ea50ee07385df687296f69f
GET /s/play/v19/6ae84K2oVqwItm4TCpAy2g.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://faceit.streamermode-5vs5.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18100
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 May 2025 18:05:16 GMT
expires: Fri, 08 May 2026 18:05:16 GMT
cache-control: public, max-age=31536000
age: 10749
last-modified: Thu, 24 Aug 2023 19:54:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|