{"report_id":"02645612-1eaa-45f3-a1ae-31e855954692","version":0,"status":"done","tags":[],"date":"2026-07-30T15:04:32Z","url":{"schema":"http","addr":"dota2.faceit-authorize.com","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"172.67.148.217","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"title":"Rust — Explore, Build and Survive","dom":{"size":93378,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4513)","md5":"45004599c918e11394c7a1139fc9f0aa","sha1":"9f0fa78b7a9156622b65c73a023bd48f3e62e57b","sha256":"848f4985c9d1cada9314d047d9579a36e68855fd6d1e79bb8e4e94d8c284090f","sha512":"eeade22d54cf1a0b322d20f0790e4cc1b1fd434987ff26fc76a8be57d73d0a70f570bc5de09059e71eb401a1437a78829ed74cd2eb79c73208108be1dbc85626","ssdeep":"768:2+JSxKYlbjtA8AF/bMEHTH7jpVO0RWeSGdp421En36EAoQTLZ:FgxKYZ3AVbMEHTH7jpgWfx1En36EQ","tlshash":"e8931a56a8f310265493d2e86b77971a3f719017ea06c9087bed27904fc3ee9d96338c","dom_hash":"domhash1ae5f102d2cfb7b93308166cb0b7d147","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dota2.faceit-authorize.com","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"172.67.148.217","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-03T15:04:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"oldddrewq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"oldddrewq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"weeklessstatic.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dota2.faceit-authorize.com","ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-10","domain_rank":0,"first_seen":"2026-07-30T15:04:36.042793Z","last_seen":"2026-07-30T15:04:36.042793Z","alert_count":56,"request_count":28,"received_data":19253089,"sent_data":16216,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"eastus-8.in.applicationinsights.azure.com","ip":{"addr":"52.179.73.44","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1994-10-25","domain_rank":24427,"first_seen":"2021-12-08T18:17:36Z","last_seen":"2026-07-30T13:41:47.797368Z","alert_count":0,"request_count":3,"received_data":1146,"sent_data":1782,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"oldddrewq.com","ip":{"addr":"185.125.201.125","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2025-12-29","domain_rank":0,"first_seen":"2026-01-21T12:54:58.380748Z","last_seen":"2026-07-12T14:30:54.103687Z","alert_count":2,"request_count":1,"received_data":412,"sent_data":580,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"weeklessstatic.bet","ip":{"addr":"172.67.171.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-31T20:14:32.961285Z","last_seen":"2026-07-30T15:04:36.026013Z","alert_count":1,"request_count":1,"received_data":742,"sent_data":571,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7594dcf957fda45078c9ca863ad92623","sha1":"f287718c1da84710d2a975d1f4fe8336411e4744","sha256":"3db880e385cf3a3f2f5f2bb10f93536211c5c2ae3e95eba6ab9e39783019ba95","sha512":"6b01d07fb8513fcdd5f35255b80756e89e23906d3fb7830bcfc9230f7a019367e040d98260acd98d167628c4485a64037b3c75f8a469f8b594ac25e5cf3efb18","ssdeep":"96:q26UiD3fdO0z6Q5Nlf47LgLtibdy/K3BHBENIOye5A68rDjPGd/30E2A2udxvY:q26U4vNz6SQKiRHxWmUKLjPY/30E2F8i","tlshash":"8ea186a976812127cd46f072986ec85475f5274f37d09049a68cc0189e389bd9bfeafc","size":4968,"data":"","first_seen":"2026-07-30T15:04:39.045778Z","last_seen":"2026-07-30T15:12:32.736969Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb364ed18b1cce87aca66d91996d5d77","sha1":"d1ed7316b8a9262f7d647804eb6e77d19f4b2a0a","sha256":"5d1601fe22d5023bfd1111e9d9602371d1309b20274c3be38b003a5711da3149","sha512":"ebec581ff673a91f83cde0640b948b7246f8f6ff44334be3d9d29ed40fb684b9c08b09056463d006af7a3f5e835a6c2fa438d36d811ad649d45a13545caa34fb","ssdeep":"","tlshash":"88c08c88214b5cb152aa6a454f7f6201b00622125090a932785e2208cf20d1b9348804","size":170,"data":"","first_seen":"2026-07-20T15:57:43.614735Z","last_seen":"2026-07-30T15:12:32.737836Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"50175d436c1b9dcc0a1563da0e246920","sha1":"d985c8430617eb108eb3d1a3b29670a4904aa086","sha256":"2317ec899af20a1edb1b4fa8618685b3cdb1853b364464fffeb4b989d856a770","sha512":"e0691df94b692fd7de1ac3845d3bf3c1a41446c9a8945faff21ecf9ea0c6e6450e1f1464247c12e904e8193485f130c2a4c3453fd9b7278f7cd6d46d9d867bdb","ssdeep":"","tlshash":"fd11f58bb1b37122e2e77179558b03482730010bb804a9787a6c77529f91b302562b8d","size":930,"data":"","first_seen":"2026-07-20T15:57:43.616191Z","last_seen":"2026-07-30T15:12:32.738641Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"29511a82cb850b45ccfc50d28b420658","sha1":"58c5d130a02870f2112f9818dcc557aa05569a30","sha256":"024cfa02d4d1b6a8c9430b482eb828eaea13beeb9511460408d4a0de31f7e072","sha512":"c69f9308b3739056efffa2c06c55219cdbe5890b9e99c873e54669f2edf399c0dfe8c40171fd49d4f2cbc25c12374708ae005add66cb72241b769f7e44c2a360","ssdeep":"384:JtGxzrXz36MEyDRztwN4L41ZIEoDtqkeTw2p:vEn36EAoQTLp","tlshash":"cd92b65b71b300324da760fa6797838e3a3181076945ca84bf5d4a625fd3de9aa733cc","size":20063,"data":"","first_seen":"2026-07-30T15:04:39.048501Z","last_seen":"2026-07-30T15:12:32.739459Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d39feac76c875399fb29f0325b361e11","sha1":"7a1a44fde53f9bbc4dc80028eff5ce784c04fee4","sha256":"b0f5af7315e1fada115b583b03989c518777269e93b4a392dbf23cdd7ca6da99","sha512":"6f2276f7d42bb4b3d570eea2416cd8aee04a4db059487ea74db94b02a8f0efb26d7617a9c6f25e439679f72fb16268002544b2ba89ae391f2bb1e870ceb688b4","ssdeep":"","tlshash":"fe41671b6eb7253241b3e73e97ef9710353504032446ed093f7c5a8aaf82ea25d616cc","size":1958,"data":"","first_seen":"2026-07-30T15:04:39.049461Z","last_seen":"2026-07-30T15:12:32.740264Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b40d6fcd1217bf09d222c5e067e23d5","sha1":"4e2324690379aae25594719168addd8eb5a95d54","sha256":"1a638db1d539bd22854852f23d62d39f60601a3c6c0ea95ee1e76d3256c9b48e","sha512":"feaffb57bf4e34fb179b9326a2f45a8d239e9d45cbbc574b601656509f71fd395147e0659d8551f79e1221b54684f09c9f093517a8b8703df7e1195ac97d8f94","ssdeep":"","tlshash":"7111c02a237305360ff3a4ba476ba9782212002314c8db44bd1dc61a2f407696fb07d5","size":930,"data":"","first_seen":"2026-07-30T15:04:39.050217Z","last_seen":"2026-07-30T15:12:32.741077Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/js/js.js","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a502f6455dba95a0330186e6812746f","sha1":"efefad8cc487e290126d1cbde03ed5086c6abfc0","sha256":"93d7c47a82816b403fdeb31d841d52b3779bc69cb37be198ebf82c5173b8414b","sha512":"a8f418d7a692b363b7c189de96e3aa790be6b80cb7422f3a2af9a6770fa2cb32db9ee5b656e6d77010469e72671a50c56c7d7a9e50812cc037097e455f3cd5f0","ssdeep":"6144:mNT0k+98CN708vLOE8cvffVsgXBGOYsmxu0WpQSq5Hp09jJ:m3A8CNgkOE8amkoh6","tlshash":"15a4f8ceb3c670269396f478503f01cba97b66a2b45cc89ab189cce02d7459a5137f7c","size":474125,"data":"","first_seen":"2026-03-19T12:19:57.423467Z","last_seen":"2026-07-30T15:12:32.727647Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/9v064yw8qflj.js","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc274175b4ca821281dbf25f52f4e3dd","sha1":"52b6dade810887c8ec81fab80be4789323594873","sha256":"e9c7acf7193a3396e6458025ff1493f6acbc87f3bec0d2ef7938ecbd13cd504e","sha512":"43a5c40564e6cf97f55ffeda472828a20ac054e3bcd53ad0dee9a895c6da56e7ce900945a6978367a9b9c859e9180d15653c1c0dc149e3a3559a45efc0d0fbb9","ssdeep":"6144:KHoPOCTX2MdOdKM76vDpGB/r0HNO1EdbzpIi:H0dKM76vDpGl0UydfD","tlshash":"1494e6702bd0a88813a78fbb771bb4d5fc5e095f3d44089bd204fe9079a552aeaf1931","size":418102,"data":"","first_seen":"2026-03-07T23:18:27.077552Z","last_seen":"2026-07-30T15:12:32.726506Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/js/script.js","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6c8dd0110c7af193783ae402afe2202","sha1":"d586cc4f1d6aa24640038acac59be63de9d1bd28","sha256":"9bf9a4c9264730c030e002fff078b48a5b72869196e1b45ce6d5ec63b2d89635","sha512":"420c6ddb784268898bece74f2be07bb0f34d79d55eecd94959cbcbc0238b40b79b105e9575897e0bb5e505ac41f936698264e34bebf020c9dc2a81fa92a6e255","ssdeep":"768:VNxu8TZQREXDl90Qak5CjRRM8M69zMx01MBMZAoTmMi3MnjMaqHME4fpqfMQMWxD:Bu8tQREXxKesPM8MoMcMBM4M3MaqHMYd","tlshash":"38233f6e26141179857b632eef9786d8fba6112b8512c2047c5cc89d2fb9c3092f5ff1","size":48876,"data":"","first_seen":"2026-03-25T11:54:49.573782Z","last_seen":"2026-07-30T15:12:32.734617Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/js/ai.2.min.js","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"30f39ae5d1d05a439046a7640510b486","sha1":"716efa29594edae8832bb8b12e7fb19bc06e06fe","sha256":"bde9be4cbe799089a419225f87c2a9986043f6c7cb55853aaadab7200713f136","sha512":"f67fdafca801746226acb9d2ef6d90070dd1d8a5a08bcb5dd1c94631f1559373c56d9796a5633cac03e1a5a384cf01d60c080a6ef16cea4b52aaa93ed364b55a","ssdeep":"3072:m3yFsd/M+C0w0Ba04g+179ET9/OEMawYU1+eCSJLI016qw:ANT+179ExHFSJLI01i","tlshash":"2cc317ccf1c1b46a526b3075507f250b723f5aa6245c85a8e45ee0e93cb906ed323fad","size":123063,"data":"","first_seen":"2024-03-21T16:27:34Z","last_seen":"2026-07-30T15:12:32.706119Z","times_seen":6525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"LightBox 1.0","filename":"https://dota2.faceit-authorize.com/js/script.js","line_number":1185,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-30T15:04:03.200Z","timestamp":1785423843200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:47:53 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7DEEfFeSpjBrpNlnJaD%2FVMS5vrSMhkyoixbo9uIuJJEFGVrJGgEJhzdkUPifXRmrZHuXucDkRH3F5HOwQ80ZzrsOOBktOax2nqWbOSh07dk8bsih3%2BMhlXPcKumx4aNU8ce28xqJkatsdvZqMA%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a23540ec2d914e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102727,"size_decoded":27454,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4513)","md5":"766223d17a7b3cfb88bc07d8565211cd","sha1":"5507788c6855763fc9d87d74f07fab7d7e935d8b","sha256":"e45a62e74544c7a51a6f771a93ecc2e4c75a9aa540411864db6e9dbfd11c7799","sha512":"d860ae069b44a8dc66461f3a885dad4b15b0b999c89205ccc40991a3720091c2e5ee3bdecda57f2c9602d9da48e5b820512d2a364f415efc6073c6b4b8cafed9","ssdeep":"768:us+JSxKYlbjtA8AF/bMEHTH7K/VOoRWeSGdp42TEn36EAoQTLH:urgxKYZ3AVbMEHTH7K/gCfxTEn36Ei","tlshash":"4da3f756a4f310335493d2e96bbb875a3f709013da06c9087bec17944fc3ea9ad6369c","first_seen":"2026-07-30T15:04:39.015871Z","last_seen":"2026-07-30T15:12:32.733595Z","times_seen":12,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":6,"connect":16,"send":0,"wait":80,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/images/test.png","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.782Z","timestamp":1785423843782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /images/test.png HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/css/styles.min.css\r\nCookie: ai_user=1hf9QZxsh8RXZkax/lRWzB|2026-07-30T15:04:03.770Z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:47:55 GMT\r\netag: \"2bdfe-657822d27de8f\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TJtN2Z2JSqntTcUm99YdJSMM2N4FF6LUfBK1Odx4vCexzF8tlmtZvEZx9VE6yxk0AzFzStohEbzEy2XdTNsPgW6QL7JmZGlsPPjcGBCsv60qEJ7AENL7xxrXJpsR9DMnk%2FrQZry%2Bmpmv2oltxQ%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a23540efadf24e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 179710\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179710,"size_decoded":180422,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"694905666e633ac6cf2647c407bdf303","sha1":"5fba08cdf0f5d4fc32e8e74466e03af6ebd68335","sha256":"6418cae81b869befaefc127e06a442e5696f6e8412d6775b17591a13398a16ed","sha512":"4951a0ed7fad975bc7eb8b2d4f28f4d00416262d6002e7bce3de8f5cad86f16bc524e425f85f2fcfcfa733ccc3a22194ed5f6e9c65e52b81c5f13a3f3e419c61","ssdeep":"3072:RAzyxfAEJ0J7mvEm75rOjrteBHrQNXFPAjjkh9viv+ibQY6ixv2hX1AYFwZmy+Ol:RHxf+7gtdrOjr4tQNdAHKgv+ibQY6iBz","tlshash":"28041211786db7e43afbf02053d5d0646c7e0362e4a50d323ade574aef946a92ece348","first_seen":"2025-07-02T11:00:04.052682Z","last_seen":"2026-07-30T15:12:32.730294Z","times_seen":31,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/images/image-section.jpg","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.830Z","timestamp":1785423843830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /images/image-section.jpg HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nCookie: ai_user=1hf9QZxsh8RXZkax/lRWzB|2026-07-30T15:04:03.770Z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:47:58 GMT\r\netag: \"7c226-657822d600d59\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oaIqn3KNhIN0eug5yPpJRFTOl%2Bn8UnIJ3GgEC92eOQgC93m%2FWtkwLI57tCRQpHltoQG98VWW1GA5SeKn8zmmWf3SLGKUYAd69REWgHRUITFr5yk4VkIncGuSEDDO7W3umOBNtJACd0qjuZdOhw%3D%3D\"}]}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a23540efedf84e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 508454\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":508454,"size_decoded":509167,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2160x1000, components 3","md5":"2084fdff18816e0e180246ca2416bfa9","sha1":"aa33bd1b27b88dda39d74f8e8f53a5d2847e400c","sha256":"a36bb55a8d01b2022ef0645a2ef510534aaf3845655347e4adace062a79cd1f2","sha512":"135ded2658bbbf50e96df407068ff821b1b70df70973dd6da8386fd787d677e2ff070f17f509f63b2519c23b39bbf36e1fd5c1abb656716693072ae7849796de","ssdeep":"12288:UeBYPlFq9wZcJgKTGL3k44OFF7/GZbnZzsMwYgqMLFgo6E:JYjOEcRCL2hxLfo6E","tlshash":"c7b423e690a69b0a991411ba439be6c1fd235c7d8f05f08646fd84c2ed8df3c3c5a267","first_seen":"2026-03-19T12:19:57.440494Z","last_seen":"2026-07-30T15:12:32.724116Z","times_seen":31,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/fonts/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0C4n.ttf","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.780Z","timestamp":1785423843780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /fonts/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0C4n.ttf HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/css/css2_3.css\r\nCookie: ai_user=1hf9QZxsh8RXZkax/lRWzB|2026-07-30T15:04:03.770Z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:48:02 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gWIMT1VrHgugTHj5z%2B8anASrJDD0C1buh1EAx5gWx4GG8Q6TQOj981ZOvX8owlkts8pnbwtjk6cWzrvv7lfjsdIUs6xyDhz0aPzVbWiJzZGCQ3T4Kthc1pPWIoXB88G9Xehh1I40JqnrdKvhCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\netag: W/\"1dd04-657822d988a45\"\r\ncontent-type: font/ttf\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a23540efadf04e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122116,"size_decoded":74975,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 14 names, Microsoft, language 0x409","md5":"bd422c3b13258ea45e5c311e0ebe9617","sha1":"50d372e0f573fec8909c44aea06a589c697c1695","sha256":"47ed1cfaa7ffca04a04ab850b2938fd52c09d1b44cfa3e2980878e166b0cbd87","sha512":"e13633793ccfd0a6ba081a2cb758c228863344d43d30e3df28ec0f4f9aa551efb2d191d40c6e385ff98c461399a6a9dc5e8c5c5f90f374e8dd476408aef44dc3","ssdeep":"3072:gN8wv6Y4bWdA56qeGm8+anLNa1nxdgq2nX9+qB:KRA56qec+aA1nxanNl","tlshash":"74c39d13f323ae6de93228f583d9d3a1bf979c20e365c34fd84d2716a48b05c5aa065d","first_seen":"2025-09-22T18:13:50.490282Z","last_seen":"2026-07-30T15:12:32.722607Z","times_seen":1023,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/images/twitch-bg.jpg","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.829Z","timestamp":1785423843829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /images/twitch-bg.jpg HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/css/styles.min.css\r\nCookie: ai_user=1hf9QZxsh8RXZkax/lRWzB|2026-07-30T15:04:03.770Z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:47:54 GMT\r\netag: \"2ad0f-657822d1caf48\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X9mS9WyoySp5vKAqb8A9aV3gOzXUinsxWeCeoD8zIS7OJMp0vAZdPxEmPoLDtDi1bEbrBnvrJUJhUVWbILT2GtHopggaLFp3auzETgZEXpgt2ZfMC1CLdVBE6T8Qd2m2MLoC1dOlQQcAg7UwZg%3D%3D\"}]}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a23540efedf74e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 175375\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175375,"size_decoded":176084,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2195x800, components 3","md5":"a90259f6cdd1f5b0db2eed36540202e7","sha1":"a4a0debe3bea3efc64a55cb014d699652bf53b94","sha256":"2a021abe13bf4f7999b9a60a3b858633e449d11244ee4d46759fc45a2813200f","sha512":"78ad3e61bf5e5be292b3ca9909242c96152f5a94ab3e51a70da4d58ae3bdbcf4099e068e8955be7108b9c1f06fd74cf202ba95c361b0ce9caea463e9f73a3e28","ssdeep":"3072:NvXcLSJlJFW4vcPFC/5IVmkqFTG8boPajllnPHyQneclS4SeY3eHyKSVMkkHtGtq:NfJlf/vcP8/+VLqFy8boyZxKhci3zaHp","tlshash":"4804122bd714125dd7de13b134bfc67aef20a254aa59840f0b2a5c3baeb7b083d1d548","first_seen":"2026-03-19T12:19:57.458228Z","last_seen":"2026-07-30T15:12:32.713178Z","times_seen":30,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/fonts/JTUSjIg69CK48gW7PXooxW4.ttf","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.846Z","timestamp":1785423843846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /fonts/JTUSjIg69CK48gW7PXooxW4.ttf HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/css/css2_3.css\r\nCookie: ai_user=1hf9QZxsh8RXZkax/lRWzB|2026-07-30T15:04:03.770Z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:48:03 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gpdo6RmezRyzs829qlXKnOLxMldTvYW7bsuqNPJ31p%2FnlZs32oDDSgwsNvnpVsmZKvGRZsbz0MQiI9zcIRkegLX97jPvfCxwSSDtqQzkZBedOqH%2B%2B68zuvtbVm29i7DHB8wBEt%2BgJKhWXhMySQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\netag: W/\"db48-657822da3639c\"\r\ncontent-type: font/ttf\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a23540f00dfd4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56136,"size_decoded":28172,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 8 names, Microsoft, language 0x409","md5":"895af0d79aebb4ef2279d7f691dc8b92","sha1":"ac208c2416e2ad9f6324697b98b8fc7ccb338f9e","sha256":"939fea723dad24504f40faadc34eeffadfbbee558754f70c3c736e13786b0ab6","sha512":"6c30da5e214227c211ed8c80d1ec900fafe8299174582af5247b15bdfa1d13778c2c5ab90086436fea7c075fb19120b55dcb6569f60baae7619505193a4c2dab","ssdeep":"768:1rEAKGsrMMfLLBXYEXPvJXiejETgR1pHgzDiR+vHXVoDcGxuszRgtD:1VKXFfLLBIgRXTQTqpAzDi+9oDcSuyM","tlshash":"fb434a06b743d509ed5a5e3424eb03a9eb21f96aae5b038b64c83fb57cdb0d42dc11c5","first_seen":"2023-09-18T11:02:30Z","last_seen":"2026-07-30T15:12:32.724879Z","times_seen":64,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/media/rust_shipshape_hero.mp4","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:04.091Z","timestamp":1785423844091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /media/rust_shipshape_hero.mp4 HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nCookie: ai_user=1hf9QZxsh8RXZkax/lRWzB|2026-07-30T15:04:03.770Z; uv=ms7n9avq-fi8np0tl; _ga_QVFB2GZHYP=GS2.1.s1785423844$o1$g0$t1785423844$j60$l0$h0; _ga=GA1.1.2003015383.1785423844\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Thu, 30 Jul 2026 15:04:04 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:47:51 GMT\r\netag: \"17ac25-657822ceb75be\"\r\ncontent-type: video/mp4\r\npriority: u=4,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=64A7kQ2tssDDLHW%2F5hQWCGm2ftviYxfOW%2F6zj%2BadoeI3UAGluaS%2BJWgoru6Kn0tn58Tr2ek1VUMBHY1hjQd744C7UMaB98Z7SRtgvqGi91dNaGqrrfEQBH58ngW9BPC9aIvDKzZjWN3JblQ%2BCQ%3D%3D\"}]}\r\ncontent-range: bytes 0-1551396/1551397\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a23540f19e224e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1551397\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1551397,"size_decoded":1552138,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"85a7a400f19b2f2d13610347793116a9","sha1":"f76f7f4d68b049128730887c777a4bccc23595e2","sha256":"2e2d116dab7cc0c6ceaf29b429d6a6349204cbd8b71cc300699b720c68f926c5","sha512":"988289c74f593d35122d30d37a7327aa9b9d6d48fafc1b37a24d652612b2275f7aa7fb298dacef405de9e489a3cefde42a32ebd09fce0081407aed4a023f851f","ssdeep":"24576:i1v9C7qx907VEFhwnGDy4ilouLtRI+tlb+l:QEqxaSWnGQrD7E","tlshash":"0b2512085be218e1f4ad72bfd4e06d56aef36e63dad206c275cf08a29f405340d1b5a7","first_seen":"2026-03-29T14:58:28.759168Z","last_seen":"2026-07-30T15:12:32.717778Z","times_seen":15,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/css/styles.min.css","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.523Z","timestamp":1785423843523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /css/styles.min.css HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:48:04 GMT\r\netag: \"3b638-657822db68223-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=labniWtujY0E02R%2FZGftrvKW2%2FaDOUtFjJ3KgUDoE5%2B4BlHI1sNJw6XcCIcNcw3kJEuulOT8J2Bs5G%2BVfkRORiU%2BP73yDRvP01hdrJPnSOyiLxz2AW84Nj8yNCzTB6BhrVZ9nq279CFkDh0TYA%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a23540ee0db64e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33839\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243256,"size_decoded":34610,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0c5b71116eaf44947c0d68a36cbd6800","sha1":"a247d7f3b179570b066509cbbfce030136455859","sha256":"3ff69f280ae5310027d81156e99f761258bb87ecdef6dec5aa35dafa88aaeb5f","sha512":"1584628e280466cc8071c2142159ad81645d1ed9475f39f1a24c5c78022bf7bb48310f50a987c262670e4a1ea5edb49294920b83da735fed47a674efe524426e","ssdeep":"1536:rK8q/KGBg7VjSKLjGhK8BXRAT6Izw/7qf7AGvDGmaXedjx9q+Nko9KnyZzovx3Fv:rV2qGhbGvDGz+Nko5no","tlshash":"db34c923aa46380ea427453f70d2955c533d8440e7276bf97177a5e8df8d28f2a33b4a","first_seen":"2026-03-31T20:14:38.449954Z","last_seen":"2026-07-30T15:12:32.716105Z","times_seen":15,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/css/icon_1.css","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.657Z","timestamp":1785423843657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /css/icon_1.css HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/css/styles.min.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:48:04 GMT\r\netag: \"1c9-657822dba8963-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2Fe4SphYx8Ws1YCSEC%2FIm2rKUQJ74qCxUJOw3%2BlvzpV4vnoVDH1lZ22ONFDGTBeABacoMT31RLfzrz7Jkq8C5fonegDjsX7kkgHPYpWmHaMF9gU7pL5Mn4jxnr70P07bt%2BZxva%2BUWO%2B%2BJWbnAw%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a23540eeddd14e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 270\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":457,"size_decoded":1041,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e008ed232c36cfcb0e5a1f0b1d4dde54","sha1":"594daf0dad067ca239ab85c5e06312a814059a3f","sha256":"730673520962eccb2572e18b59a2707270466bf402ca729bcb6c636066d9f1ba","sha512":"6dc817367ad186bf4fd1a886a9818430648cbd4c5e4be80c644d4d9f47248c7943b62dee013d52d49fb3fd61f09306146261652f5cc7de4c4ff1d5198e221d3d","ssdeep":"","tlshash":"3cf0e514aa05a98281320d65bb4f3f140d08401fa60a847abba11d6d7feb27a6346b0f","first_seen":"2026-03-31T20:14:38.435281Z","last_seen":"2026-07-30T15:12:32.719349Z","times_seen":15,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/images/favicon-16x16.png","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:04.087Z","timestamp":1785423844087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /images/favicon-16x16.png HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nCookie: ai_user=1hf9QZxsh8RXZkax/lRWzB|2026-07-30T15:04:03.770Z; uv=ms7n9avq-fi8np0tl; _ga_QVFB2GZHYP=GS2.1.s1785423844$o1$g0$t1785423844$j60$l0$h0; _ga=GA1.1.2003015383.1785423844\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:05 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:48:00 GMT\r\netag: \"178-657822d77db17\"\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CgIE0BoGDUxs5J8Jor3LsfS0oRKy0hmvPXzPwvzFkbWGluu19bfJwtZwsUck5eG79oPUXJVVHQ6D8H48G21JjvyyBROKOvv5odLax8ZrdZ9DBnFePJfRqn8rnzXtxsA4G2oMTECeUBGQywERQw%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a23540f43e4a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 376\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":376,"size_decoded":1082,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"d2bb377cf6868761a1745c478fc22352","sha1":"dc8f30dae4ec52c701dfd943fcec834fa9c25b79","sha256":"bfe1543ce409e8425648c520cbab611ab9ee8ae53fd746ff778d59f69b84d12d","sha512":"5295744b8336032c5a099e4386592d5eedf0dc69e013df1af4538cefd5fc5ff7e2ab29606fa1115c1adc2828c01bcc3c0777b2d02d96460203334d4a0a2f9ada","ssdeep":"","tlshash":"f9e06ac7a7c531fd530e873770e3d245f6a539187380488e6d52d04cd409a4401f5601","first_seen":"2026-03-19T12:19:57.455945Z","last_seen":"2026-07-30T15:12:32.704511Z","times_seen":28,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":643,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/media/krieg_tile.mp4","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:04.090Z","timestamp":1785423844090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /media/krieg_tile.mp4 HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nCookie: ai_user=1hf9QZxsh8RXZkax/lRWzB|2026-07-30T15:04:03.770Z; uv=ms7n9avq-fi8np0tl; _ga_QVFB2GZHYP=GS2.1.s1785423844$o1$g0$t1785423844$j60$l0$h0; _ga=GA1.1.2003015383.1785423844\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Thu, 30 Jul 2026 15:04:04 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:47:51 GMT\r\netag: \"22ed44-657822cf48225\"\r\ncontent-type: video/mp4\r\npriority: u=4,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2F4%2FP9FK%2BmSvjyVfMm79CKjxpahLJDjmiGroXmf0UyjY7A1E%2FnL89sj%2FQxcIftGVs9NDq9nlbfpK5cOhzlOWxdaGp7%2FBM6pEkjU7JXk8iip7un9dUUGbFTQm5R5NMuUlKtDigKbCEJ1RK1Pdwg%3D%3D\"}]}\r\ncontent-range: bytes 0-2288963/2288964\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a23540f18e214e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2288964\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2288964,"size_decoded":2289707,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"44a4af72ea207366a886391cb0121864","sha1":"b22457fbc2e62f8d3503df08fff95cc49ac79afb","sha256":"fdf57a7e966ac3f1c01faf8b225f6420fbc31a9378eb5da4a43781abc2642ff8","sha512":"e9b50aedd8b2ea1cee70ede28709313f7596ca54c5911a10a3e21dc9b0c26c157a5566ae69ce266d6a7031b1ffd61ed0b6f2e3bcfbab8947163b0cf2276f6467","ssdeep":"24576:pOGunjSsQeU+AYSFRpOWqD1nDbwOMcL5RtmUsDOGH5ih8beEp:CUdF7oD1DE8LjAXDch8beEp","tlshash":"8525220887941d43e56eb33b99c6392a1b3b7e53c5c25b81ba8f64141fa17248f4ec7b","first_seen":"2026-03-19T15:18:30.497405Z","last_seen":"2026-07-30T15:12:32.720193Z","times_seen":16,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eastus-8.in.applicationinsights.azure.com//v2/track","fqdn":"eastus-8.in.applicationinsights.azure.com","domain":"azure.com","tld":"com"},"ip":{"addr":"52.179.73.44","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:04.543Z","timestamp":1785423844543,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"in.applicationinsights.azure.com","organization":""},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 08 Jul 2026 17:57:27 GMT","end":"Mon, 04 Jan 2027 17:57:27 GMT"},"fingerprint":{"sha1":"EE:18:A5:16:51:F5:1D:7E:98:58:DB:3C:7B:FD:C2:99:EF:FC:F2:9E","sha256":"64:3A:85:D2:DF:5C:6B:A8:D7:60:C0:DD:F5:DE:4A:D6:B8:CF:EB:81:C9:98:17:AB:48:6E:F1:79:67:26:8E:A8"}}},"request":{"raw":"OPTIONS //v2/track HTTP/1.1\r\nHost: eastus-8.in.applicationinsights.azure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://dota2.faceit-authorize.com/\r\nOrigin: https://dota2.faceit-authorize.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin,X-Requested-With,Content-Name,Content-Type,Accept,Cache-Control,Sdk-Context,X-Set-Cross-Origin-Resource-Policy,Content-Encoding\r\naccess-control-allow-methods: POST\r\naccess-control-max-age: 3600\r\ndate: Thu, 30 Jul 2026 15:04:06 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":412,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-30T18:31:05.882152Z","times_seen":17620850,"resource_available":true,"data":null}},"time_used":3318,"timings":{"blocked":0,"dns":0,"connect":96,"send":0,"wait":151,"receive":0,"ssl":3071},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/js/ai.2.min.js","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.528Z","timestamp":1785423843528,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /js/ai.2.min.js HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:47:53 GMT\r\netag: \"1e0b7-657822d0c4042-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UR8DEnjQippZOqZyECrlM1H6gnadgNVG5qBOt573UqiWgGcHlV%2Flz9RfPy%2BlhwpWPdE0HUcZXU2faIv9L8HUjyIqvgWUOVapveY8N0uhprG7OudIrcsIv4OBfT8qmZ6sgEtfJATOCIkgaF%2B2mQ%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a23540ee0db74e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48080\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123063,"size_decoded":48854,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65409)","md5":"30f39ae5d1d05a439046a7640510b486","sha1":"716efa29594edae8832bb8b12e7fb19bc06e06fe","sha256":"bde9be4cbe799089a419225f87c2a9986043f6c7cb55853aaadab7200713f136","sha512":"f67fdafca801746226acb9d2ef6d90070dd1d8a5a08bcb5dd1c94631f1559373c56d9796a5633cac03e1a5a384cf01d60c080a6ef16cea4b52aaa93ed364b55a","ssdeep":"3072:m3yFsd/M+C0w0Ba04g+179ET9/OEMawYU1+eCSJLI016qw:ANT+179ExHFSJLI01i","tlshash":"2cc317ccf1c1b46a526b3075507f250b723f5aa6245c85a8e45ee0e93cb906ed323fad","first_seen":"2024-03-21T16:27:34Z","last_seen":"2026-07-30T15:12:32.706119Z","times_seen":6525,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/images/warhammer-pack_branding.png","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.539Z","timestamp":1785423843539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /images/warhammer-pack_branding.png HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:47:54 GMT\r\netag: \"59015-657822d1738d9\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EgMklTg5%2B2m4mTZ89p6qgTg9l2WXWzYsVFrGXi2FZFQT5NWsWI%2B4%2BdGZFP9bQRCAW6ro28LvKS4%2BudiOxT8QfYb66EU1%2F4w2qYkJwOpgRhPNjK5PZ%2Btdh75hQIJcOG2RasqQdui2y7k0R0Lbcg%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a23540ee1dbd4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 364565\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":364565,"size_decoded":365285,"mime_type":"image/png","magic":"PNG image data, 1024 x 370, 8-bit/color RGBA, non-interlaced","md5":"6216a09ae376dac3975de88da1e8954f","sha1":"d5e33522512a1d54a49cc4b9d45fe6f3d8837e28","sha256":"bbc0b06ee2871e6c1fbc9d77d18d734ebad3c6e6fc681506cca98892c154b318","sha512":"9dc6bfca0cc74704109b5fd16140dd9a6dcccddd4e792a2a0287a3fb3a28484a79ac349d57c92e3cb85a917a02d41df78e6fbcc127c63b8fc033ee8fc2cf9ad1","ssdeep":"6144:nWI8OP1MSzsZUKxnKIVKFoOwqHpl2vfZxsNwZeo/GZe//ovSj6f4OCXhJsC9GqG/:nWyPtsqSnHCIqHpAHZzAoP/ckvs2zGwU","tlshash":"d07422a4e15e1322627d93f1029e02cbf687a9dff99049f1293d7a8047fb101675bf89","first_seen":"2026-03-19T12:19:57.463526Z","last_seen":"2026-07-30T15:12:32.720987Z","times_seen":31,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/images/cross.svg","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.545Z","timestamp":1785423843545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /images/cross.svg HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:48:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wjtJE2LD2zPBdBpRPSX7RL6XMxN1RX1HVFd9bKfxZhR%2BsjfUztoQZ827KsDl3EPYvabtweOQIeqiO%2FfU%2F9kQHVdA73QKTkhEY4VjHanHZssoJx8YUJFO%2B8ZIP7XSYRNWJ9Qvw5N68WApdX4Lzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"f7-657822d83fc8e\"\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a23540ee2dc14e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":247,"size_decoded":863,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44e711527edd200f64c3e1ee5b748325","sha1":"099c33783c544a0f4cc9266696305df84cc08741","sha256":"ecfb4882169845f8ce8b50f7c08089586a21b3c4a6784bcda6290cd0010c5b55","sha512":"e5a25cf18ee495d4e361c003f2e28e171faed4a79e7db9eeaf9a5b341e6829376aaa8fc737b730d220d0e66c456ecce16ace92a6a95a265879df55915fe15aa0","ssdeep":"","tlshash":"a0d0a7bcc34c0829d22ac71caf19706800bf50d10b992099dcc225326c666673cbb5ec","first_seen":"2026-03-19T12:19:57.410478Z","last_seen":"2026-07-30T15:12:32.721777Z","times_seen":29,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eastus-8.in.applicationinsights.azure.com//v2/track","fqdn":"eastus-8.in.applicationinsights.azure.com","domain":"azure.com","tld":"com"},"ip":{"addr":"52.179.73.44","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:04.175Z","timestamp":1785423844175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"in.applicationinsights.azure.com","organization":""},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 08 Jul 2026 17:57:27 GMT","end":"Mon, 04 Jan 2027 17:57:27 GMT"},"fingerprint":{"sha1":"EE:18:A5:16:51:F5:1D:7E:98:58:DB:3C:7B:FD:C2:99:EF:FC:F2:9E","sha256":"64:3A:85:D2:DF:5C:6B:A8:D7:60:C0:DD:F5:DE:4A:D6:B8:CF:EB:81:C9:98:17:AB:48:6E:F1:79:67:26:8E:A8"}}},"request":{"raw":"POST //v2/track HTTP/1.1\r\nHost: eastus-8.in.applicationinsights.azure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://dota2.faceit-authorize.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1483\r\nOrigin: https://dota2.faceit-authorize.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=utf-8\r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ndate: Thu, 30 Jul 2026 15:04:07 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":62,"size_decoded":322,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2cda46b540f9b3852e234b984cd4001e","sha1":"201da26f2bf2841be68133fc3451e22b2f585702","sha256":"b5a6b8f8dced09bf18920a311f765abe1ee41b3153a14ac76cad8e42e7b8a563","sha512":"d4ca90d0b208430f1d34a29cee453f044250c66749eb5b3be2d379719a30a3c30acba47c10b6a26c6b90211da25ead1174f380604ac0f181c209cb147c1b737c","ssdeep":"","tlshash":"e6a002562c5615472910b45cd8003c06404cd8a6ca35b4f4dc5699c621915260c6340c","first_seen":"2024-03-25T10:14:48Z","last_seen":"2026-07-30T15:12:32.715003Z","times_seen":2420,"resource_available":false,"data":null}},"time_used":3506,"timings":{"blocked":-1,"dns":4,"connect":92,"send":0,"wait":344,"receive":0,"ssl":3065},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eastus-8.in.applicationinsights.azure.com//v2/track","fqdn":"eastus-8.in.applicationinsights.azure.com","domain":"azure.com","tld":"com"},"ip":{"addr":"52.179.73.44","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:23.044Z","timestamp":1785423863044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"in.applicationinsights.azure.com","organization":""},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 08 Jul 2026 17:57:27 GMT","end":"Mon, 04 Jan 2027 17:57:27 GMT"},"fingerprint":{"sha1":"EE:18:A5:16:51:F5:1D:7E:98:58:DB:3C:7B:FD:C2:99:EF:FC:F2:9E","sha256":"64:3A:85:D2:DF:5C:6B:A8:D7:60:C0:DD:F5:DE:4A:D6:B8:CF:EB:81:C9:98:17:AB:48:6E:F1:79:67:26:8E:A8"}}},"request":{"raw":"OPTIONS //v2/track HTTP/1.1\r\nHost: eastus-8.in.applicationinsights.azure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://dota2.faceit-authorize.com/\r\nOrigin: https://dota2.faceit-authorize.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: Microsoft-HTTPAPI/2.0\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin,X-Requested-With,Content-Name,Content-Type,Accept,Cache-Control,Sdk-Context,X-Set-Cross-Origin-Resource-Policy,Content-Encoding\r\naccess-control-allow-methods: POST\r\naccess-control-max-age: 3600\r\ndate: Thu, 30 Jul 2026 15:04:22 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":412,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-30T18:31:05.882152Z","times_seen":17620850,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/9v064yw8qflj.js","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.530Z","timestamp":1785423843530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /9v064yw8qflj.js HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:48:25 GMT\r\netag: \"66136-657822ef27cb8-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AWiKmJ7JDn5H%2FZeGLq%2Bc82z1N2pc%2B7zzINktxbg4UcIvyBpcf9k0QK%2FtTOP1LLjj6hCiDhF6WYbU6Yd10qnphjwWk7GVO6pNtbHO%2FOiutjqKaC14UWSU8plgYb9tsxvSQ3MnDf1uLGTbNku65A%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a23540ee1db84e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":418102,"size_decoded":135099,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dc274175b4ca821281dbf25f52f4e3dd","sha1":"52b6dade810887c8ec81fab80be4789323594873","sha256":"e9c7acf7193a3396e6458025ff1493f6acbc87f3bec0d2ef7938ecbd13cd504e","sha512":"43a5c40564e6cf97f55ffeda472828a20ac054e3bcd53ad0dee9a895c6da56e7ce900945a6978367a9b9c859e9180d15653c1c0dc149e3a3559a45efc0d0fbb9","ssdeep":"6144:KHoPOCTX2MdOdKM76vDpGB/r0HNO1EdbzpIi:H0dKM76vDpGl0UydfD","tlshash":"1494e6702bd0a88813a78fbb771bb4d5fc5e095f3d44089bd204fe9079a552aeaf1931","first_seen":"2026-03-07T23:18:27.077552Z","last_seen":"2026-07-30T15:12:32.726506Z","times_seen":14,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/images/steam-_1_.svg","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.540Z","timestamp":1785423843540,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /images/steam-_1_.svg HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:47:55 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8voFfFFkhBhjlo6ECfN4Jh0iTkGzWLsfYJyz61z2WgivzNg7kyz7AyXfIbomW3Rf3LI6a6OtSwbsbNHQVzDaDhyohDKS%2F4cPxdfmlNWx9iwCD%2BDjD779hXaSUTn25FJf0wtubsL7qwCBVpJ05A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"696-657822d2be9b6\"\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a23540ee2dbe4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1686,"size_decoded":1672,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c62b5ad595fad7e3712ac64a24378ab","sha1":"3dd138c7ad777cf54e0a249e564f3c577ad7c8a3","sha256":"03b749a7ad8da59fae2547839e5639c84d6e4b7fcccbc3d8a1055481b5aa676e","sha512":"3800be76f84edbaf300ad05396f6b4cd868606f7c5e741242d8ef9f381237ac51423d30c35a387d3ec8cda0c2b44a3c5fd31a4b47b3b4733047821ac52e4d92d","ssdeep":"","tlshash":"d631edac98a480b1ceed03c15db9fcc9433ef24f00d23c59569e7a010f58faa4d6a906","first_seen":"2026-03-19T12:19:57.436019Z","last_seen":"2026-07-30T15:12:32.716949Z","times_seen":31,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/images/rustplusimage2.png","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.543Z","timestamp":1785423843543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /images/rustplusimage2.png HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:47:55 GMT\r\netag: \"5c401-657822d3173ae\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2FQ7RGoxc3mQp%2BcdBSWa7NL9R5M65E%2Bej6wF5%2F3oNlM4WLx99ECFB8seCp2rMyJPP6u4G6UMuoNtmHKjsPqglayWSq0TrVp6IrqWEgxZT6eVvHoHbDRDWoYdjqmonGdD8cc52xQMyLckMES7vA%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a23540ee2dbf4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 377857\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":377857,"size_decoded":378571,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"868fcbc8c4875dc99fd28d173c048bb6","sha1":"4ef00c8b96e8f5b81c34a32229d14e4ff4da420d","sha256":"d68aca7d5e064051f8af31ab9ac5890913fb13a18c40e0f52b87e9eb76efa6ad","sha512":"954e5e140c6be2d0f36edf0433bb3bab581f4b981a7f4854ef73b4b3fe14405ca616c886979deaa7eda09161fccad07767aa97b40769e641a16654ea543446d5","ssdeep":"6144:3GIAJmXebJddf1OGQFJ8iKQZGQo/3zrpGIkTjOHMF2l38hRggLfPNHCz7ZuAXVjL:3VA4Xqrf0GQ78bUGn/3zUIEmM+8hRgga","tlshash":"858423416a80edcac55c10f207b5f6933e27e0d73a468cee58e2d4a1d69dabe1c34dd8","first_seen":"2026-03-19T12:19:57.41866Z","last_seen":"2026-07-30T15:12:32.710866Z","times_seen":28,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/css/css2_3.css","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.656Z","timestamp":1785423843656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /css/css2_3.css HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/css/styles.min.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:48:05 GMT\r\netag: \"29a-657822dbe948a-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QX01R0vf4bsDfEJ0lN3TEZuXz4GRNXKZ%2BJ9EVU0M%2FyjU%2BoEBd1LAJ90kEWc3hVfKmFn2NQ8xRCiOtYwCs%2B14JNYq5uan1aS9ZIOItsLlNih1UydpDn6bJzlHDJr6uxSzA88GjexnjMzjWQw5SA%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a23540eeddd04e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 258\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":666,"size_decoded":1023,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"37d54bb22eb42e76d0e6dcfbd1d8e647","sha1":"4d76a8b7520a80c5b076160ac5151e263b3ab1fe","sha256":"c22b6d9a2b436fe511645e9718803541ad88d880af1f825a3445d3fe1c150be9","sha512":"32d53d338cca6686650d8209f72db21abc15f0af5f6708fd9d6997087169849925748b35cb0fe60cf5b485d4c07660c5a78d30e382862695c0c56d6eedfa58ab","ssdeep":"","tlshash":"4a012850500b6433ca360e6d77af7f181d4e28252210c12a7f3148787fd79345361f4d","first_seen":"2026-03-31T20:14:38.430012Z","last_seen":"2026-07-30T15:12:32.729475Z","times_seen":15,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/images/bar-dark.svg","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.828Z","timestamp":1785423843828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /images/bar-dark.svg HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/css/styles.min.css\r\nCookie: ai_user=1hf9QZxsh8RXZkax/lRWzB|2026-07-30T15:04:03.770Z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:48:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yAaJ%2B6Mhnu%2Bibg5ekiwrijAUHeRTXncA6KibpE%2Bac4EsA9Rc75CUF65IUPUylCJjhaKSLzt30rNZUMCSKQ7bVrUXt7sTjUN8a3inm8g0J3yKb67%2BTMRWMQe3YQOA2EUya9mKoiN676N4l%2FDclQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncontent-encoding: zstd\r\netag: W/\"219-657822d8803ce\"\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a23540efedf64e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":537,"size_decoded":1007,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"70bf047c4341bbe69c3276230085f019","sha1":"f90905026706dd8adc7b244eefcd11626211ac95","sha256":"3c2b6003a76ab4e4e571595d34e6ecfd3e6af15ebee9d672bc95e4935fc680f7","sha512":"fe685488443e226d0730150cf68de20e07bddb7665f985199fefc89a7b5835743e39a26cb47a11e0c84c67308a4f4b1541dcf3097e6af0e3365ee5709c4ce707","ssdeep":"","tlshash":"8af0e2d593888476b70cff53522cfc6a4053bfae3d6d8015ab806518a1f86c22b62698","first_seen":"2026-03-19T12:19:57.430025Z","last_seen":"2026-07-30T15:12:32.72338Z","times_seen":31,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/fonts/flUhRq6tzZclQEJ-Vdg-IuiaDsNZ.ttf","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.847Z","timestamp":1785423843847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /fonts/flUhRq6tzZclQEJ-Vdg-IuiaDsNZ.ttf HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/css/icon_1.css\r\nCookie: ai_user=1hf9QZxsh8RXZkax/lRWzB|2026-07-30T15:04:03.770Z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:48:03 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IwyzAYxWAuB0F%2B09EZ9IYIcjQQBCxcTrLjSlRjlKZpxJa51k0yuiu93GPO6kvpwSTkodoy2MeVhJZ0uFg5vDOyxuvKbymEtarGFuIIWPaYzIRSrdk%2BU6QWrMOsFIjCpC1xrF73MZ1BeDoyxoOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\netag: W/\"571e8-657822da8ed94\"\r\ncontent-type: font/ttf\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a23540f00dfe4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":356840,"size_decoded":178228,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"GDEF\", 7 names, Microsoft, language 0x409","md5":"4e85bc9ebe07e0340c9c4fc2f6c38908","sha1":"7e02c3f005532ff4d24148567c84089756a7848a","sha256":"ef149f08bdd2ff09a4e2c8573476b7b0f3fbb15b623954ade59899e7175bedda","sha512":"cef81d0e26f41ea5576da4e411c7ac64ec13f9dd7456fb61849f410d7a6318739fd16fa29ca7ed4554d69650bc892734a6965768087bba107bf3303ff02ba597","ssdeep":"6144:IpIkEOgzGNuPLcc6GsPIttNzW5DsLHHBkCwihR4syP5VbLF5cXgZ1b4Gy8SF5JOy:IpIk0zoeLcpG9ttNzW9sL2sxxnN8fm4a","tlshash":"b2742a53b3ab897ac6839f3e5432d2b7c04e14137bb7260f884db5a795de48dc9a460c","first_seen":"2023-04-27T19:02:54Z","last_seen":"2026-07-30T15:12:32.725651Z","times_seen":963,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/local_assets/ai.2.min.js","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:04.079Z","timestamp":1785423844079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /local_assets/ai.2.min.js HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nCookie: ai_user=1hf9QZxsh8RXZkax/lRWzB|2026-07-30T15:04:03.770Z; uv=ms7n9avq-fi8np0tl; _ga_QVFB2GZHYP=GS2.1.s1785423844$o1$g0$t1785423844$j60$l0$h0; _ga=GA1.1.2003015383.1785423844\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 30 Jul 2026 15:04:04 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q34KtWqMzUMtL4g5TK0c5mSdN2QQ%2FsGGM3Z9xBkNmk1cg7xZcHkGP6NkAQvNShLWH8yTmfzY9mzr32fb7virXDaQqNnGxzhSNyhvDgE4BkTXMMr%2BffiCjVm27kndEHXuXotkk2O4D1LMFpzZsg%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a23540f17e1d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":289,"size_decoded":870,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"889e0601110e3cb309279b5d6012be4f","sha1":"9c3641b1dfbf4c5bcfee16198a474a8cdfb51eb7","sha256":"46ae43cc481c94853d98145a4e147edee6b90a6b8b405f8310296b86d7f82459","sha512":"7f4870edbcf3ee3d2f0543802d31f8504c17faebb9a2e1995a3561c1ad5743b99301a4d4755a837becbb341978ca142337b8e5b751eaa3bafd57f7662e3533f1","ssdeep":"","tlshash":"e2d0e79f4003634b4411129036c110c2224c52e6a03685ec2c82d443029823ecd89acc","first_seen":"2026-07-30T15:04:39.038838Z","last_seen":"2026-07-30T15:10:35.880128Z","times_seen":3,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oldddrewq.com/dswmnsmykowoefpokumdvuanyifaagouhpqkidxrowkarn","fqdn":"oldddrewq.com","domain":"oldddrewq.com","tld":"com"},"ip":{"addr":"185.125.201.125","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:04.080Z","timestamp":1785423844080,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oldddrewq.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 21:54:31 GMT","end":"Fri, 25 Sep 2026 21:54:30 GMT"},"fingerprint":{"sha1":"9D:65:51:9C:D4:D7:0D:DE:FA:49:C4:61:3F:C0:93:80:CA:2D:78:4D","sha256":"BA:3E:E0:27:D9:C4:DF:88:C2:9C:EF:96:34:1B:CD:1B:B0:C3:1E:A0:C3:06:AF:08:5D:9E:BF:11:E9:2F:94:8E"}}},"request":{"raw":"POST /dswmnsmykowoefpokumdvuanyifaagouhpqkidxrowkarn HTTP/1.1\r\nHost: oldddrewq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 164\r\nOrigin: https://dota2.faceit-authorize.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":164,"data":"d=dota2.faceit-authorize.com\u0026u=f-ms7n9avq-fi8np0tl\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0"}},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 67\r\nETag: W/\"43-SNjwkAFXmv9PiiPhn5gL/qJ7RbA\"\r\nDate: Thu, 30 Jul 2026 15:04:04 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":67,"size_decoded":412,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"46edf1ce17410c5150761670b289be28","sha1":"48d8f09001579aff4f8a23e19f980bfea27b45b0","sha256":"1eb60a639c85ae6790bb0c32c3b762c871e46d4f28fc160c9f044fcf42fafa38","sha512":"e0fcd014ae790da9172b8e8debfa20470e9a5ff5ab70bc959b1fc6472eb2c28bdd77388f45a23c69625e7e48482b517b1672da7f75ed133f03301272b2dcb5f1","ssdeep":"","tlshash":"bba00245865071fd9b07090c958d2e010bbc012fadc464c6f00c0e8991f10ab9425233","first_seen":"2026-07-30T15:04:39.039994Z","last_seen":"2026-07-30T15:05:21.633339Z","times_seen":3,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":63,"connect":22,"send":0,"wait":62,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"oldddrewq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"oldddrewq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/js/script.js","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.532Z","timestamp":1785423843532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:47:52 GMT\r\netag: \"beec-657822d01303b-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EVucb9M7VyMRQO4Nsyp9IR%2FIybeEsFc2RDu4CP5zn1qbO9e1f3g5oct%2BJWKickv7PVB115kCWIdtVLzl2921L0G8jWO062ateaI%2FRA0uUB4nRCMyqp%2FSFjYaPpBqJznsIJz46O9%2F1%2BuVKJP70Q%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a23540ee1db94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9378\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48876,"size_decoded":10156,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (587), with CRLF line terminators","md5":"f6c8dd0110c7af193783ae402afe2202","sha1":"d586cc4f1d6aa24640038acac59be63de9d1bd28","sha256":"9bf9a4c9264730c030e002fff078b48a5b72869196e1b45ce6d5ec63b2d89635","sha512":"420c6ddb784268898bece74f2be07bb0f34d79d55eecd94959cbcbc0238b40b79b105e9575897e0bb5e505ac41f936698264e34bebf020c9dc2a81fa92a6e255","ssdeep":"768:VNxu8TZQREXDl90Qak5CjRRM8M69zMx01MBMZAoTmMi3MnjMaqHME4fpqfMQMWxD:Bu8tQREXxKesPM8MoMcMBM4M3MaqHMYd","tlshash":"38233f6e26141179857b632eef9786d8fba6112b8512c2047c5cc89d2fb9c3092f5ff1","first_seen":"2026-03-25T11:54:49.573782Z","last_seen":"2026-07-30T15:12:32.734617Z","times_seen":21,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/js/js.js","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.534Z","timestamp":1785423843534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /js/js.js HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:47:53 GMT\r\netag: \"73c0d-657822d06c5ea-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zqQhymnXUMuBb3vEHlI%2FMCNlSWwj4INhB4I%2F1rT8HFv2Yqt6ZXZ%2BErjPKqxiyFuOxMjHIIgVGbpmFJPJYXnUY6Dvl7pwsmyMqQYyZJJocG%2BfUC%2BUyiOpju%2FIA%2B37EqZXlI4X9n9fcw8WuxhznQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a23540ee1dba4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":474125,"size_decoded":158269,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"6a502f6455dba95a0330186e6812746f","sha1":"efefad8cc487e290126d1cbde03ed5086c6abfc0","sha256":"93d7c47a82816b403fdeb31d841d52b3779bc69cb37be198ebf82c5173b8414b","sha512":"a8f418d7a692b363b7c189de96e3aa790be6b80cb7422f3a2af9a6770fa2cb32db9ee5b656e6d77010469e72671a50c56c7d7a9e50812cc037097e455f3cd5f0","ssdeep":"6144:mNT0k+98CN708vLOE8cvffVsgXBGOYsmxu0WpQSq5Hp09jJ:m3A8CNgkOE8amkoh6","tlshash":"15a4f8ceb3c670269396f478503f01cba97b66a2b45cc89ab189cce02d7459a5137f7c","first_seen":"2026-03-19T12:19:57.423467Z","last_seen":"2026-07-30T15:12:32.727647Z","times_seen":28,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/images/facepunch-brand.svg","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.547Z","timestamp":1785423843547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /images/facepunch-brand.svg HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:48:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ijZQ9mw8kek8vRb%2Bqdeyv0q30fyy80MbLWizMX15bgwzHUEVRJl8VkK2hI8ewr2eyJRoHpROjzPMkYPPTgU7QsuoU8VNjMPyAohh2gt6kIvvm3DjOU75x%2FvpD1ClG4wtBwe3o0aFWQDTlR3vHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"1bba-657822d7be63f\"\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a23540ee2dc24e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7098,"size_decoded":3628,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9ca5a39dfacefead08ab7a5559a4d15b","sha1":"a20050a526d6f6cb558038e2a63ede45a4dcb24e","sha256":"4aa9ec61e62fd790d9eea0d7fc9ff4ed1ab958515aa3728a6e8b2dbbc37fb1d9","sha512":"94256d7030c1415335445f7bece55d6270c22b041bca4973d30f49085ee570e75e3383f6a92030697f38793a0e876d9b72c0e256a836434e15da41fd57ea7cdc","ssdeep":"192:5UgFR3rQONQEFusxymnm2ABikdn1UT4w49UnEL1:53drQONQSusoFB7c4SEL1","tlshash":"bbe197fd67e4a3f4f409e7f0b7a14ca87f1758f555aada24c3ad0c18a51245cc8989c3","first_seen":"2026-03-19T12:19:57.413542Z","last_seen":"2026-07-30T15:12:32.712217Z","times_seen":29,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weeklessstatic.bet/30eb1","fqdn":"weeklessstatic.bet","domain":"weeklessstatic.bet","tld":"bet"},"ip":{"addr":"172.67.171.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:04.071Z","timestamp":1785423844071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weeklessstatic.bet","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 09:20:54 GMT","end":"Fri, 16 Oct 2026 09:20:53 GMT"},"fingerprint":{"sha1":"16:B7:AD:E8:34:F1:2A:A4:7E:B4:49:46:8E:BA:7D:BE:4C:80:06:A4","sha256":"02:48:20:34:0B:7E:3A:FB:CE:87:9D:95:9F:56:69:B0:78:EE:71:03:D9:A0:DE:9A:5D:9D:97:A7:B1:F7:ED:FC"}}},"request":{"raw":"GET /30eb1 HTTP/1.1\r\nHost: weeklessstatic.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 30 Jul 2026 15:04:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EZwMoXUupcC1Jc9kqI04Yjwh5Bc0m81Cb9mb4m%2BYQp9YY5bbdbG0Hz%2FNonC3WxQ3LgazGbweD2fIA9yHLECbT6Ndbmh0qlE%2FB8QSUVemUWjK3bkT%2BEiLrjZhJ3UCSxmokHt4WRU%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a23540f21c34b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":700,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-30T17:57:20.542788Z","times_seen":544826,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":78,"connect":22,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"weeklessstatic.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/apple-touch-icon.png","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:04.086Z","timestamp":1785423844086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nCookie: ai_user=1hf9QZxsh8RXZkax/lRWzB|2026-07-30T15:04:03.770Z; uv=ms7n9avq-fi8np0tl; _ga_QVFB2GZHYP=GS2.1.s1785423844$o1$g0$t1785423844$j60$l0$h0; _ga=GA1.1.2003015383.1785423844\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 30 Jul 2026 15:04:04 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rtY6bhx0uAtjvSE3AUxnnWf1NuRrS2X%2BFnpwz0zMRBoYXuOYXYEykTOD9ukIbOJhz05wnh%2FjzJ46%2BM6g%2FhqJsALsrtDCcVSQBm2nfPXMoFi7WpIDloSnOIQjMAlx2%2BBcujVT8jhs9IYFKtkhRw%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a23540f43e494e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":289,"size_decoded":876,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"889e0601110e3cb309279b5d6012be4f","sha1":"9c3641b1dfbf4c5bcfee16198a474a8cdfb51eb7","sha256":"46ae43cc481c94853d98145a4e147edee6b90a6b8b405f8310296b86d7f82459","sha512":"7f4870edbcf3ee3d2f0543802d31f8504c17faebb9a2e1995a3561c1ad5743b99301a4d4755a837becbb341978ca142337b8e5b751eaa3bafd57f7662e3533f1","ssdeep":"","tlshash":"e2d0e79f4003634b4411129036c110c2224c52e6a03685ec2c82d443029823ecd89acc","first_seen":"2026-07-30T15:04:39.038838Z","last_seen":"2026-07-30T15:10:35.880128Z","times_seen":3,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/media/rust_site2021_hero_v002.mp4","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:04.089Z","timestamp":1785423844089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /media/rust_site2021_hero_v002.mp4 HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nCookie: ai_user=1hf9QZxsh8RXZkax/lRWzB|2026-07-30T15:04:03.770Z; uv=ms7n9avq-fi8np0tl; _ga_QVFB2GZHYP=GS2.1.s1785423844$o1$g0$t1785423844$j60$l0$h0; _ga=GA1.1.2003015383.1785423844\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Thu, 30 Jul 2026 15:04:04 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:47:50 GMT\r\netag: \"b4795f-657822ce40f37\"\r\ncontent-type: video/mp4\r\npriority: u=4,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y84ZdgFWFY6mceyrLljJBaUrUE6Jihr7Ln4Nfi0KRL81kROq7ogvsqfn6U8ja%2B3d4iMCwZAjCLXm7D4ZabzeoYUWj2aUjC7P2dAqUJ66t1eXHtg9RJOdg4z4YSncMwYaA4XbsLp4v06KTeGsnA%3D%3D\"}]}\r\ncontent-range: bytes 0-11827550/11827551\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a23540f18e204e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11827551\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11827551,"size_decoded":11828287,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"ad65a6cfc8e88ce6943a6779334daa4d","sha1":"b19dea289a8790d46d7d5c4e196ff0fb6acac3e9","sha256":"7a5a1c50152e668016e21ecf4084ee2b8e0e6ed2a67d42701dde5f4b2ad86a2a","sha512":"293cf8664f049df0a1c2696439e7010120e78e35e56a6834eaa2d4d06f808d36130c1a5f695546f739a8ff3286da45a3ac36af30c77aecb1b5d5a231a842a8b5","ssdeep":"24576:VrXdU2f2dP84RSzVJ/lrwl+ewI3/ORB9BA:V7Tf2dPxRSzVr6+31e","tlshash":"5a2523f623d9297ace524639728121b3a5e8d87a46f61b033dcd82105f6e5e21f4cdec","first_seen":"2025-11-07T19:42:14.432127Z","last_seen":"2026-07-30T15:12:32.735707Z","times_seen":19,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":331,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/images/rust-marque.svg","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.537Z","timestamp":1785423843537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /images/rust-marque.svg HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:47:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=faAyItQzLwMQ%2F6Ohz4YJXewwHmwFJB0UR8xX%2Bkx7ndfcaI6wU5eAvX%2BX1mScQLOa18qRZRr8T%2BWGs%2Flu3%2FsJz%2Fw9vwG0ewhBEVVr%2BNxzTuXkNnA7ia6wh1myKttnNwiTz9cmsBsjSOfRB8sYHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"329-657822d3995b5\"\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a23540ee1dbc4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":809,"size_decoded":1079,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"74e1256b00f5c90f11cb38a21276c12d","sha1":"77ced4b96bb6ffee2b43edcfdecfe32dd9a5dc59","sha256":"08e89c0144c6e637cfdf6090d1a321e29e14f2d14a70a42e335e14fc62f1c7fc","sha512":"3c15f1c788b4bd5827f7c6c465792004dcddf8176f21a8ac09eb226881f812d5780211995314e354c6273ea0aa6eb68de971bc6f40c53bade239d2582268fda0","ssdeep":"","tlshash":"3e01abe3b24da044c41d43e54aade6f68077a1ec495000003986355a6e8de6f9c2cee4","first_seen":"2025-07-01T04:11:25.422383Z","last_seen":"2026-07-30T15:12:32.728603Z","times_seen":32,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dota2.faceit-authorize.com/images/rust-brand.svg","fqdn":"dota2.faceit-authorize.com","domain":"faceit-authorize.com","tld":"com"},"ip":{"addr":"104.21.55.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dota2.faceit-authorize.com/","date":"2026-07-30T15:04:03.544Z","timestamp":1785423843544,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-authorize.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 06:29:26 GMT","end":"Tue, 08 Sep 2026 07:27:57 GMT"},"fingerprint":{"sha1":"E8:DE:E1:63:A5:D7:D7:CB:0D:C2:54:FE:B7:41:9D:42:C8:25:73:35","sha256":"DB:5F:44:2E:30:3F:46:6F:92:E2:67:02:AA:4B:DB:78:03:62:C0:B3:77:10:7E:6A:E1:B5:50:2B:4B:DA:A6:ED"}}},"request":{"raw":"GET /images/rust-brand.svg HTTP/1.1\r\nHost: dota2.faceit-authorize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dota2.faceit-authorize.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 15:04:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 11:47:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=khSgenxwJ%2B7panfljYXOanJmNmBbe%2B6l7kYgZFebU9S31uMpJWwGlQ%2FqboC3g%2BGKYeMcNH7R8IdmQE55VuEyon7ptu4QEhk2NpV6NFJmCbIda0UEhqjE34HtE%2F7UVnx27LByt3R0Y7EXp89uKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"5a0-657822d3da0dc\"\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a23540ee2dc04e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1440,"size_decoded":1364,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b863b13c044d79e63fdd1e7ca720cf05","sha1":"c4b54b5ae897adb23b730a796782168c41732c67","sha256":"8035d37c16f164515bcd6dad0c8700c044b9b78e0a6ada97c71f9afa83b065be","sha512":"67375719c50d48c8f54f549ce1a92b2751868215e9f45833fbbe528d2ed669f2fe44f0e9ef7ac8b342ac048dd223d1513f985ade0d6c1cf078e2d6c301288bcf","ssdeep":"","tlshash":"1521f4e7778c8080a90503f1abaea1be003751fa99968140754477af7c8cd9f2c5dac0","first_seen":"2026-03-19T12:19:57.421522Z","last_seen":"2026-07-30T15:12:32.707808Z","times_seen":29,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-30","alert":"Phishing Block","trigger":"dota2.faceit-authorize.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"dota2.faceit-authorize.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}