| GET faceit.twitch-cs.com/favicon.ico | 89.169.12.220 | 200 OK | 5.4 kB |
URL GET faceit.twitch-cs.com/favicon.ico IP 89.169.12.220:443
ASN#207957 Sevasteev Artem Nikolaevich
Requested byhttps://faceit.twitch-cs.com/auth CertificateIssuerLet's Encrypt Subjectfaceit.twitch-cs.com Fingerprint6A:2D:B9:D1:32:50:D3:1C:95:9E:C6:FF:2E:1C:83:77:0D:C9:3B:35 ValidityTue, 08 Jul 2025 17:32:25 GMT - Mon, 06 Oct 2025 17:32:24 GMT
File typeMS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hashd37e8235c4d8033c6a2d4d8060ebe1a0 8a87548dba6a59fb94165c49929cc95494168c3c 35823a6b96d1200ea297d4e0f860fed749dde7e4cac0e120b8a769af64f26c2f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: faceit.twitch-cs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faceit.twitch-cs.com/auth
Cookie: uv=mcxytoqn-wfujzc0l
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 10 Jul 2025 22:34:34 GMT
Content-Type: image/x-icon
Content-Length: 5430
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 08 Jul 2025 21:33:23 GMT
ETag: W/"1536-197ebf52f42"
|
|
| GET faceit.twitch-cs.com/auth | 89.169.12.220 | 200 OK | 26 kB |
URL User Request GET faceit.twitch-cs.com/auth IP 89.169.12.220:443
ASN#207957 Sevasteev Artem Nikolaevich
CertificateIssuerLet's Encrypt Subjectfaceit.twitch-cs.com Fingerprint6A:2D:B9:D1:32:50:D3:1C:95:9E:C6:FF:2E:1C:83:77:0D:C9:3B:35 ValidityTue, 08 Jul 2025 17:32:25 GMT - Mon, 06 Oct 2025 17:32:24 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (782), with CRLF line terminators Hash0b80c424e986b163089d52a7900b9d3e fd35d684f275d52f604a1cda88e9fc114bf2262f 687097ae3cf8285e2f9cd72b5e300c8ca2c014190e71517784641029e8c9368e
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /auth HTTP/1.1
Host: faceit.twitch-cs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 10 Jul 2025 22:34:32 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
ETag: W/"6674-/TXWhPJ11S9gShzaiOn8EUvyJi8"
Content-Encoding: gzip
|
|
| GET faceit.twitch-cs.com/rtekfgui98mc.js | 89.169.12.220 | 200 OK | 367 kB |
URL GET faceit.twitch-cs.com/rtekfgui98mc.js IP 89.169.12.220:443
ASN#207957 Sevasteev Artem Nikolaevich
Requested byhttps://faceit.twitch-cs.com/auth CertificateIssuerLet's Encrypt Subjectfaceit.twitch-cs.com Fingerprint6A:2D:B9:D1:32:50:D3:1C:95:9E:C6:FF:2E:1C:83:77:0D:C9:3B:35 ValidityTue, 08 Jul 2025 17:32:25 GMT - Mon, 06 Oct 2025 17:32:24 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size367 kB (366654 bytes) Hashf2ea8935ab28bf54bca3f80c83fd0f0c 672b91b956aff46fd82cfb424e35e8e7d80021b9 5fb6ad4459a5481a81d0ac05617d7cc62e588d1e3074bba2a9381d907acd8297
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /rtekfgui98mc.js HTTP/1.1
Host: faceit.twitch-cs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faceit.twitch-cs.com/auth
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 10 Jul 2025 22:34:33 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 366654
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 08 Jul 2025 21:33:22 GMT
ETag: W/"5983e-197ebf52aa2"
|
|
| GET fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100..900;1,100..900&family=Play:wght@400;700&display=swap | 142.250.178.106 | 200 OK | 8.1 kB |
URL GET fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100..900;1,100..900&family=Play:wght@400;700&display=swap IP 142.250.178.106:443
Requested byhttps://faceit.twitch-cs.com/auth CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintB7:F0:7E:3A:46:13:9F:42:76:6A:5D:6E:85:25:78:85:99:EE:67:71 ValidityTue, 17 Jun 2025 20:02:59 GMT - Tue, 09 Sep 2025 20:02:58 GMT
Hash9e3e13413bcf13e027006aa1c9d637c1 16f6559636066e8c3f4bbe3786fe80999ee663b4 94349075f0e6ee56894b302206b8df281fe12ac06a7d97d82411fc52dba50f09
GET /css2?family=Montserrat:ital,wght@0,100..900;1,100..900&family=Play:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faceit.twitch-cs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 10 Jul 2025 22:34:33 GMT
date: Thu, 10 Jul 2025 22:34:33 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET cdn.tailwindcss.com/ | 172.66.155.116 | 302 Found | 407 kB |
IP 172.66.155.116:443
Requested byhttps://faceit.twitch-cs.com/auth CertificateIssuerGoogle Trust Services Subjecttailwindcss.com FingerprintD9:F5:6C:8B:23:AD:83:43:52:AD:FB:E6:17:93:EC:54:CE:F9:17:88 ValidityFri, 30 May 2025 03:30:41 GMT - Thu, 28 Aug 2025 04:30:37 GMT
Size407 kB (407279 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: cdn.tailwindcss.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faceit.twitch-cs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 10 Jul 2025 22:34:33 GMT
age: 705
cache-control: max-age=14400
location: /3.4.16
server: cloudflare
strict-transport-security: max-age=63072000
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::5wc72-1752186167864-96f02eab1df7
cf-cache-status: HIT
vary: accept-encoding
cf-ray: 95d38774889156c7-OSL
X-Firefox-Spdy: h2
|
|
| GET fonts.gstatic.com/s/play/v20/6ae84K2oVqwItm4TCpAy2g.woff2 | 142.250.74.35 | 200 OK | 18 kB |
URL GET fonts.gstatic.com/s/play/v20/6ae84K2oVqwItm4TCpAy2g.woff2 IP 142.250.74.35:443
Requested byhttps://faceit.twitch-cs.com/auth CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07 ValidityTue, 17 Jun 2025 20:02:59 GMT - Tue, 09 Sep 2025 20:02:58 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18156, version 1.0 Hashaad808c85ec3c88ca213ac1cb5f02d03 c95ec71ed1a088fced4797a512cd2cba9790a27f d539e6e7c0240f1565b1156395d914d93200b2c3ba312809813bb6ca6f96578b
GET /s/play/v20/6ae84K2oVqwItm4TCpAy2g.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://faceit.twitch-cs.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18156
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Jul 2025 10:30:05 GMT
expires: Fri, 10 Jul 2026 10:30:05 GMT
cache-control: public, max-age=31536000
age: 43469
last-modified: Mon, 02 Jun 2025 16:44:43 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET fonts.gstatic.com/s/play/v20/6aez4K2oVqwIvtU2Hw.woff2 | 142.250.74.35 | 200 OK | 18 kB |
URL GET fonts.gstatic.com/s/play/v20/6aez4K2oVqwIvtU2Hw.woff2 IP 142.250.74.35:443
Requested byhttps://faceit.twitch-cs.com/auth CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07 ValidityTue, 17 Jun 2025 20:02:59 GMT - Tue, 09 Sep 2025 20:02:58 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18128, version 1.0 Hash3ed6c0946ff584a90850e13ab42305eb e99ed206e2c7241fa3823c5dfe81b0aab45c4ed7 a8824b32c20407f3e05b353ffe9b606670ff4fe88574afcbee6b02e31eab7fc6
GET /s/play/v20/6aez4K2oVqwIvtU2Hw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://faceit.twitch-cs.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Jul 2025 10:09:21 GMT
expires: Fri, 10 Jul 2026 10:09:21 GMT
cache-control: public, max-age=31536000
age: 44713
last-modified: Mon, 02 Jun 2025 16:45:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET cdn.tailwindcss.com/3.4.16 | 172.66.155.116 | 200 OK | 407 kB |
URL GET cdn.tailwindcss.com/3.4.16 IP 172.66.155.116:443
Requested byhttps://faceit.twitch-cs.com/auth CertificateIssuerGoogle Trust Services Subjecttailwindcss.com FingerprintD9:F5:6C:8B:23:AD:83:43:52:AD:FB:E6:17:93:EC:54:CE:F9:17:88 ValidityFri, 30 May 2025 03:30:41 GMT - Thu, 28 Aug 2025 04:30:37 GMT
File typeJavaScript source, ASCII text, with very long lines (52853) Size407 kB (407279 bytes) Hash2697bf25afb0982dfa17c73536f934c1 7d7db122d0639cd1f1a53eb6018d6d713d312679 fb798bb21731986940cf3a9950fbca386e03633e9a45497701e71f9b87d132ea
GET /3.4.16 HTTP/1.1
Host: cdn.tailwindcss.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://faceit.twitch-cs.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 10 Jul 2025 22:34:33 GMT
content-type: text/javascript
server: cloudflare
vary: accept-encoding
cache-control: max-age=31536000
content-encoding: br
strict-transport-security: max-age=63072000
x-vercel-cache: MISS
x-vercel-id: cle1::iad1::fwv2n-1749895810053-34e0604df531
last-modified: Sat, 14 Jun 2025 10:10:10 GMT
cf-cache-status: HIT
age: 584291
cf-ray: 95d38774a8bc56c7-OSL
X-Firefox-Spdy: h2
|
|
| POST tramppanel.com/dirxwrumwoynxmajlnmklkfbcfsartoncgwsimwilmibhn | 89.169.12.174 | 200 OK | 55 B |
URL POST tramppanel.com/dirxwrumwoynxmajlnmklkfbcfsartoncgwsimwilmibhn IP 89.169.12.174:443
ASN#207957 Sevasteev Artem Nikolaevich
Requested byhttps://faceit.twitch-cs.com/auth CertificateIssuerLet's Encrypt Subjecttramppanel.com Fingerprint8E:FC:9D:05:D2:1E:EF:D8:36:FF:81:8A:2A:48:09:BF:6C:53:4F:46 ValidityWed, 09 Jul 2025 15:52:13 GMT - Tue, 07 Oct 2025 15:52:12 GMT
Hash11acfd4299196b0b9e51f8837c9cb4c7 9e9dfa9259ceacde7a34ec564b384351985b3529 8c8d0b510a415941c591147f9ea5b5150da50cb85bddb646414e7ed4cf1fcd60
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /dirxwrumwoynxmajlnmklkfbcfsartoncgwsimwilmibhn HTTP/1.1
Host: tramppanel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 158
Origin: https://faceit.twitch-cs.com
DNT: 1
Connection: keep-alive
Referer: https://faceit.twitch-cs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Thu, 10 Jul 2025 22:34:34 GMT
content-type: application/json; charset=utf-8
content-length: 55
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
etag: W/"37-np36klnOrN56NOxWSzhDUZhbNSk"
X-Firefox-Spdy: h2
|
|