{"report_id":"051ba162-cd6c-4494-ab74-5f83fd2152ef","version":6,"status":"done","tags":[],"date":"2026-05-19T09:22:01Z","url":{"schema":"http","addr":"faceit-verifyauth.com","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"104.21.66.170","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"faceit-verifyauth.com/","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"title":"GO VERIFY YOURSELF","dom":{"size":28039,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (425)","md5":"266a9e0e6ba6628b9a1ee6f6596f22ed","sha1":"2880774db7c6fa0c576598c4b8d775de5f1afab6","sha256":"d1ad50a163478698bf8046f5ce8fedb09804697e01777c25e49d4598806a0fe7","sha512":"53e56df496534ecc35ecdbdcfb2a5684bf1b160d7c75b2bf7b702cafd4626a61a7f717f94108efb823aebbe24806f0e0bfeba32d449dcdcfa34e73e23d0be2c4","ssdeep":"384:nOpWRXL7d4nuTur3hO0EOUu7uiHiFyuGSJ:nOpWRb7dgQ+3hXLUUCFyTSJ","tlshash":"9ec2ca2258f6207302c380d2af625b6bbfe29107da1a494472fc87d8af9bd47de1315d","dom_hash":"domhashe6e7836fcca8a69e708e95710ff2a318","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"faceit-verifyauth.com","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"104.21.66.170","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-23T09:22:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"faceit-verifyauth.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-21","domain_rank":0,"first_seen":"2026-05-19T09:22:03.960634Z","last_seen":"2026-05-19T09:22:03.960634Z","alert_count":132,"request_count":33,"received_data":4369748,"sent_data":15084,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"faceit-verifyauth.com/js/jquery-3.7.1.min.js","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-05-19T13:11:29.62144Z","times_seen":158575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/js/jquery-ui.min.js","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e2047978946a1d271356d0b557a84a3","sha1":"5f29a324c8affb1fdb26ad4564b1e044372beed2","sha256":"9528ca634fecad433d044ddd3e6f9ce1f068d5d932dafdbb19d8e6daea1968bd","sha512":"e7ba19fef5bc00d32347f290e817bdbfffbf87a6eaf7f9777f439ceef9faa8cab286f3ddd5cbca051596a73bb44289de226aabd929263b8312a94f91a47a26dd","ssdeep":"3072:eDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:uNdIVWjNS9cdzAV","tlshash":"8944f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","size":255084,"data":"","first_seen":"2023-03-07T18:39:57Z","last_seen":"2026-05-19T13:01:42.001354Z","times_seen":28174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d626812a1ebcd5b4842098bd49fd3d00","sha1":"8b64223d08e137eaf9a2f6bf13055ff7a6197823","sha256":"7503526668d935086aa63c87037eddd8c1d0747d9fa027f780e05629917800b5","sha512":"7c96446682e81f8d612ed82b469ba7466d97c6a4207b4083a5b97242ded16446a596093bc4eb1bd7ab4aa150eef7fc42719c4ecb09800d0904845a141c2e53a0","ssdeep":"","tlshash":"34d02e200112243a01bbc34ecb8bafc1328a008b404a9400382c8d4b3fc44a3e4a86c0","size":269,"data":"","first_seen":"2025-09-25T16:31:51.218639Z","last_seen":"2026-05-19T09:24:58.628295Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ddaef8c775618b743a3147abecbef03","sha1":"8733489d221f502d1363c055dac8b09b598640fb","sha256":"199267f911ec953ab8a1c7e37a600dd33d6774375ff25ac4a5ec9f7055c7468e","sha512":"3cebe5fe841243dcca70507a89e5d82972bb1008cbdb8f621cbcfdd77a6ebd0b64f67d89679bde14a9512def4986fc61eb444f782a42f9d31937397a4769b7bb","ssdeep":"","tlshash":"20e08625c7011537827785f57f46bead5560034f12048559789c45541f9ac2959d0cf5","size":357,"data":"","first_seen":"2025-09-25T16:31:51.220522Z","last_seen":"2026-05-19T09:24:58.629574Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8264d4dfcf1150dc5da56369eeb34ad2","sha1":"1843d59ee14bb903222649cdbf419da388910e52","sha256":"f7aac8b60f08fbd197c1f709dddb1d627d2c5b1cf52f3ec5524869eeac312e16","sha512":"11a14a1a9fd507bb5d8d725b6b11bb635a0a767b7580be64f7364928136cdb7f6bca9ec775f16917dd733d50e50d06949cc21dc2a5141adb7c27eafe253fa7d2","ssdeep":"","tlshash":"c3d022670234113006bb4197319b9ac168e218e7d220ec0939fc8acc1fafca202b45db","size":269,"data":"","first_seen":"2025-09-25T16:31:51.222385Z","last_seen":"2026-05-19T09:24:58.63259Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e717fbfec81c6ab6409dedebb368ad61","sha1":"14664578d0256c41b09bd00d6d3ab4b98abd2c1c","sha256":"329a9c61a7047a9144d18ca053bcee9f581dc43434d1a8ac60f6b3822c7ae606","sha512":"66e3db4089af8c5c1ba726b45bf86d83e84107716f2224d078c9fc073230406f4ebe526e3ca046b6680d467d211a7f073b11083719b66ecd82903d50f7f22066","ssdeep":"","tlshash":"e9f0e226a23a297a01a752be2f8186832130000b42448a0c3ebd96743fdcd1f2de16e7","size":574,"data":"","first_seen":"2025-09-25T16:31:51.224429Z","last_seen":"2026-05-19T09:24:58.63394Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"faceit-verifyauth.com/","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-19T09:21:37.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: PHP/7.4.33\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qKAfWiFvqB%2Bn3r1CkaF6Aj7naqpK8gh%2FubX8aARgQBEAilqAGbAuosm6kQM5eHlTnszvEdA9QlQtlpaxWUwOYR%2FCkI2SoZqF8zh049tRF3OTev0%2FLhn5PJhS2moTzGIZhpgjbo%2FHQfc%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fe20851d8965693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}],"data":{"size":28416,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (360)","md5":"5f70f8380b5678ab19e122b5202fd3c8","sha1":"b7bc9730d5ddde70f8ef9bb269510653593a3d1f","sha256":"943fb32f1f440469c02a380dd33eba571ab58b29299a54e86b710a1e50cc1447","sha512":"6724ca31189013bcd487169594ab1824fbfddc0d56e64e540516f7042f20c71340bc51ff6b19396e1175d5e91a99150408382791189bf542f3b930da02a19275","ssdeep":"384:DYpwRXL7dIFilur3hO0EOUuLuiHiFyuGSH:DYpwRb7dem+3hXLU4CFyTSH","tlshash":"77d2ba2259f6207302c380d2af625b6bbfe29107da1a494472fc87d8af9bd47de1315d","first_seen":"2025-08-04T05:50:45.307979Z","last_seen":"2026-05-19T09:24:47.427228Z","times_seen":5,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":37,"dns":18,"connect":1,"send":0,"wait":104,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/player.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/player.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 189290\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-2e36a\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YmW2GK4S6RE0K7mzrn3nbl92tNyak8LBYqkeHFbWYXd0Ri4kpOvETwkfdtr8cjVfhn81bSLYetyPxFQPD7r%2BCzcJnxalOrlv1wa3l4HUivOUO%2Bb9C%2FM1IEwOjaRKGpsT%2FjwMzyeerfQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853cf2f712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189290,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 415, 8-bit/color RGBA, non-interlaced","md5":"37b0afe78fee66ba4f6f107f4e3b682b","sha1":"40187d9a1d0a12f17f6cb91ac183c07f9b0b479b","sha256":"5b5ee354effd393c9dc23fbfa68bc1621738cef36bde227ab40ff4ea8e4b9251","sha512":"0e7455f366812d045a75d6ec332574be5bd6f99290176f0416d381427357dd89445cc4ce02c4817540d81f991b0594c8218890327df25d420358a8ee0a809844","ssdeep":"3072:Y9Tgu2G4dn6Lo5iTZcONfIwFrb1NwTl3/EYNQSB5LPELqisDeCJVfD+fi:ov4xlwTZcON3wx38KDEjsD1","tlshash":"9d0413f4c87ee14e1bb6dab1e7e78a6a88114fc5175e46424beef932c24b2805146cf1","first_seen":"2025-01-05T22:57:12.12258Z","last_seen":"2026-05-19T10:25:43.63086Z","times_seen":76,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/youtube.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/youtube.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 612\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-264\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=baONHVXqdf%2BPq%2FTSamH3s6F5qQE3F8m6HvDjTxS16YJZ0iyFnVQqqOS7chDNYA9Q969V1B0AE869EWiFFNSgPSA0PTmZw5xxBKLBSM%2Fu94JRPROez3VIXDpe8m7zoylll2ZLJJo1jhA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853df4c712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"608dd386d5f3ab4f1bab06fbabfa8491","sha1":"97508178a6930ef3c088b70d56120dfb8806860c","sha256":"b4be1d600bb4510f31b3bfa25b5dcee342309082517bc439fed214ad1e28d189","sha512":"e073db35350f3d33028c6a4ec05b393d1844f0bc7b01702b6c5084b592a5d2669c22b6a1e2a515165ab934a748bc52d9814a1ce7d162ef874357159ce0f768ca","ssdeep":"","tlshash":"49f062fe0290002bd22f5eb2a6cf071ed9fb80a50912006082eeeb28e14e40a46d5a5b","first_seen":"2025-08-04T05:50:45.298428Z","last_seen":"2026-05-19T09:25:05.397387Z","times_seen":53,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/2.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/2.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 43611\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-aa5b\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GcuPpYdzXfuOIWD0GYd5fdk0e70vcGKRxeB75mFpsiQswVWAaWzQRAUBlYjNrQH5fEeFPzqhG31%2B7gC6i3kY9YiZML6AsBNNtDw4BN7kEmo%2FqyHABvzH2Gpcd37FgmkQoQJRbsGVqg0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853cf35712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit colormap, non-interlaced","md5":"3b1f9d993727a4725fd71722dece106f","sha1":"9d35c6f70ef2937c357dd4a90df5aa42bdf26e0f","sha256":"131db747bbb5e6f57f8301a3fe9b805b73006923479db53311650ea0c74d9e67","sha512":"7d75e39f2fd3ded23f0f51dc4446ea7a250c127e202dc83eb41c83f45859249fd113e6781282d7d357e780bff4700b22f91a5c920953973a28b48a7bce5fbe58","ssdeep":"768:rfkH94I6XIyXPe1O5Ms7gvRJAazHkUAlA3higqtSLSD6O27rOpl:rfkHL64yfeYKs7MAazHqA3zqULwr27ra","tlshash":"4713e14a29740d85e64e4b7620e1112a2b634d835ae3a0153dee3c4bfff18af8f515f2","first_seen":"2025-08-04T02:14:22.544263Z","last_seen":"2026-05-19T10:25:43.622149Z","times_seen":54,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/players.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/players.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 242652\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-3b3dc\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W9cE5s4eFnmfiedAR1IwBSA0OEz5QC6TIBl46JdYwexTuzukwuWgPLWwWvtFIhHQFlbtur%2B1qHaksEp659LjAZ%2FB4vBO%2FFUudbtaheDQ5JaFua0T8IcFkZD3ESSg%2B4%2Bu13ZHrB4Cg2M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853cf3a712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242652,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1020 x 778, 8-bit colormap, non-interlaced","md5":"516b2ecdc268b171e65d7f9499450bac","sha1":"3a1a5762a1515ddcb4dd05fd41cc4bd4ecd7f7eb","sha256":"1e4b7408604c813bb0a9297844579f2c44f750f96547805d7ef49b089880f8cf","sha512":"a95905f89ea1fc55186607d5f180b31dfe884aa633f86a82d464d1baf88d461b9f50fc908d96f78b4276f267d4795bf176f16202bcc06c831673b9e20072205b","ssdeep":"6144:mRuE0wKuPxD1IWLYmIgHjfUOYAQVp4pBl:oud+PEUYmXHjvXapI","tlshash":"a3342315832ef685ae9dc0e85c41b8dddbe14dc43d9caa1e3135b65a0236243cfddaac","first_seen":"2025-08-04T05:50:45.305775Z","last_seen":"2026-05-19T09:25:05.431866Z","times_seen":53,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/twitch.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/twitch.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 223\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-df\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tt3t9cs0i2qu9Nh75PNOAp9n05gTdBwU4puEX5Hy%2BnBecQaFhSSq3RuM88TNuFQKQ7Y78cFmHLvLbPZSAadvkbtT0E7gAMMCFaEECP3zwVgkm5Iroaclygcd1Oxt27tCJHBsM4ldWMY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853df49712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":223,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"5e0dfe53175829af58d212bf9e9b61f5","sha1":"3d0df2d64cde694220ddf9eb05307627c766538b","sha256":"6b2b83e2af00bd4db335105a5d719fa209bf9a77276f6b8053467b4f0e288146","sha512":"5081efdf7f4ef721c808daac305f70048815a46d3c10695912c0d04f2033bf52a89bd2aa2f2f63d79f52c979f85ff1d154f930da3280a33261cda7822dab3888","ssdeep":"","tlshash":"21d0a7db56858a6f906cd23b60160d4459e36e94886375159161b8f4242da9461c2e52","first_seen":"2025-08-04T05:50:45.300228Z","last_seen":"2026-05-19T10:25:43.631847Z","times_seen":54,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/4.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/4.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 141580\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-2290c\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OKaJCElhI8VpJXx1EBAw2CejuGebfY48ZXWuYZJBkwoTthgFf9YSZnFwFBJfxE7BHyqp%2BNXeompfDKZ9b60IrsfC76J%2BpnNrW%2Bh8EEY22mgB8YI3Y5zx1SuBV4BGzW0avmXDbYCJLLE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853cf38712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141580,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit colormap, non-interlaced","md5":"74940a5d07388158fe38d2cf2d5f6fef","sha1":"36a34693221a9f2eab159a84e29229ba0f41ad8f","sha256":"8f7225a19bcf1c008088be111789156f69a5df3862336a66c7b63b92e2bef6c8","sha512":"e6f54b567b50a336325fc04ad0885c9d7c3386668886803bdcc6b3bf3953a539cb8739620f26bd54818bafe077cdc12afaf7da641b99728eb00008505c2fd21a","ssdeep":"3072:dKyj3nzQagP6rq5q/CQCRfG9UD0rr1osiSw+vyKKowgc9h+:93ncagP6rqZNGCAr2rS/6KLwz9g","tlshash":"20d312430772d332b2d69704aadc35192e10ae7918ddc6bc5b06d2c3fb60bdc6c65a6d","first_seen":"2025-08-04T02:14:22.610402Z","last_seen":"2026-05-19T10:25:43.618389Z","times_seen":56,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/font/Play-Regular.ttf","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:38.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /font/Play-Regular.ttf HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:38 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AODOA8CTiVqXDTMRh0brf4drOG6DAbK2rpVbZUTFR5%2B1JZa%2Bf%2FnNGiHVAPtsuvWEkw%2BZF2wZE0BKjT9dBYyUhEsrPhdg6wXX7yzCRFd%2FeLNkP0LFFX9R8mPjXyRiach3LBIpXERFzZQ%3D\"}]}\r\netag: W/\"31e9c-63e46f9b413c2\"\r\ncontent-encoding: br\r\ncf-ray: 9fe2085588fc712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204444,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"FFTM\", 26 names, Macintosh","md5":"020f4a111af892154e2a4e8b7f05490f","sha1":"29fccdb03e5e51dfca47fa122cfbfb0e69ad8067","sha256":"007480125bc6c623d1be1f6c93cfe6872b00cce9218aadffbe7e0a7e3daf8950","sha512":"df9a9af5751f3f2fcc82413eab48b31e43b3c34995bb7adb57e4d3b3e56767adc00a4e1e5a9fc295ab43de0b961817c37b7988157aa7099efa17b6f3b78451d8","ssdeep":"6144:MkNfD6gQpSx0DJTzCysgVixtqIAKSNsLS3NnevrCpxtVgTziBZ+2g7k:hfD3QptTzBsgVixoBKSNsG3NnevrCpxj","tlshash":"ba147d0b7b5ee305da120e75196d0367a3e1f922eb4b974be5453a68ece30d81c426cf","first_seen":"2025-04-15T19:20:51.405093Z","last_seen":"2026-05-19T09:25:05.422883Z","times_seen":46,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/menu.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/menu.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 457\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-1c9\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Am6wAJuIjVpRGXlm4YHyj7sJZ6lYGR%2F1hnEciVsCRzJ5sgMBXW7ge%2F5WRmNnbu4H0DEbqVBT05jXFEOECfDZriVJESAZopz5D4J6Zbz%2BU1CQLFIoNlLgS%2F51ctAnATUW%2BrnprJqAM90%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853cf28712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":457,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"a799da96b72503b9e2ccd0b6ddc22bc6","sha1":"dafde6c34017a627288ff8fbdb22dfa3c9ee6ee0","sha256":"26c2ff5d5796cbd473b403b394f1088e25f8510abdd9401f6f5d6e47f1e7c9e4","sha512":"4c58b9801eb0ff561c4b00d4eb5191faf21a1d2b3363c480f88f1f9f5ba37e43fed058f6643aaf7ec54140c643949faa1255d68c3f3da38fea305c735ba00d51","ssdeep":"","tlshash":"ebf023c38a11d9d2e4030723076b012378bbc9c291af2a3cf754d0480a2c7dd8e32361","first_seen":"2025-04-15T19:20:51.432634Z","last_seen":"2026-05-19T09:25:05.391238Z","times_seen":62,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/1.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/1.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 61455\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-f00f\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rkqtGPCk1%2B%2BeKb3w4KNv6PBk%2F5klH5McHvQEYGcTTlNY0RGWLfh8xOVfpIzmUefzoUATcgyr6ly5WYMUlUFEB%2BqFrrVMs21DxvFVcrEgZFj%2BcLt0tbhpcvJKRZLc5%2FWiRa4hdZS8bHc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853cf33712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61455,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit colormap, non-interlaced","md5":"e32a856ffbbfb56536d50b76a150b092","sha1":"44025a425d7246a71d86e90348e9741985d47793","sha256":"06725c1a1a900904128250cb95712bc8144d133a9937249aaf4a911bd54764e8","sha512":"2ba39462c9fda261a9ada31d7c9416fcbddde269890f3c4b0a4b3d94ba9b77cbc237849de32fe12b4a1a6271bafdd7b1d9be3e413216be1cc7b9209234a20e2f","ssdeep":"1536:rPOPYKf0LmpsXDc/7AQgP9h1Z8BsZG4Uha2O:v4sXwVgP9LMY","tlshash":"bf53f1b8b6414895cc6f82f25b8204ad09b3cc88d7f1419a7e9fb9180fb99ef15c7680","first_seen":"2025-08-04T02:14:22.595782Z","last_seen":"2026-05-19T10:25:43.63314Z","times_seen":56,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/twitter.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/twitter.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 845\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-34d\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ny9X2Rlsc9kMrmsTCmqH8f4hRGIzoJhFdh4ndlbfXYawAKNGtWY6H2%2FSXmeMR9Cu6XytqRjeWc%2B8LPvIO0mwwU%2BjFopqfx3qGebgoqRZbTkVlPni5FB5P4hPPtLIEvr9M72IhSQAudc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853df45712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":845,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"7b192a8454a8bf550da2f1d70bafe43e","sha1":"8cf2587f41b26b545444281a0597b3518663deb0","sha256":"a5e887f3cab99de5e6dde6e0b71f932a6c7c8d32b90cc951cb52fc26e5d2de9c","sha512":"fa00c602cb3000aebd116313f48f4d22c60989fdf6901bc1c8c614a4aa1058482bfbfbdcaaeaef1723caa6ae9d95095a1af872ec2e44ac607cbb5da08efb39cc","ssdeep":"","tlshash":"340196b955b53ef5e08045234b5e45ef92ead7024970600c4da895b207274244362ba0","first_seen":"2025-08-04T05:50:45.284425Z","last_seen":"2026-05-19T10:25:43.615427Z","times_seen":54,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/js/jquery-3.7.1.min.js","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /js/jquery-3.7.1.min.js HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: W/\"68bea482-155ed\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fkTqmGh2OTPPKe0pIQ2%2Fs638vRniacFE%2FVR8KnXy00SvhRHLusE%2FFd9kXtE6bxEQwqHS5wHhYAoeZnRWRkepYCIPbn%2BRpwqLO22zDoBSDh8KglRG9D22HymX8CyjZJQJ5oSr7cI1fyI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853bf20712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-05-19T13:11:29.62144Z","times_seen":158575,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/DaonLogo.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/DaonLogo.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 14177\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-3761\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4BsuSIP2g1743mE%2BN58NuDWMsu0ckUq1zMTPspiM79rGDEBLPi1A8WvKZn8aAALEQmw1VD1DxS%2Boo7DKqPpLJeAOn9XVg7sZJB5LH%2FUL3LjvSi9667pM0%2BElPcVHQS2DvRx%2BgvPnIm0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853cf3d712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14177,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 786 x 250, 8-bit/color RGBA, non-interlaced","md5":"63f50cfead0a68b69ebc53eb8f72306d","sha1":"b0ba2c2d346741494384565ee0d9bfadb5e83e6f","sha256":"ebc72ec3c1b16dea4f741f3b029c1c0fed50081d65b3ef754292bcb4571afed0","sha512":"1111fa8f3c483b5f7fa609781c5406488b065c3e8a04c96f7e79a1ae75b64116bb0f5d6a7e73eb37df15d7899ce2a19d611de815946fcb5da70fcbd73291607d","ssdeep":"384:MxppPeDafNP3OUgUeUw6OVIyGdpMn3uSZ0qyFgdvXJNvdZVb:MRZ33g1UOGqn3uS14g5JjZ1","tlshash":"d352c0397b24c025ccd9614c8eb514f7e281a9cccdfb682bd2bcfd55af1941096e4b86","first_seen":"2025-08-04T05:50:45.29552Z","last_seen":"2026-05-19T10:25:43.623076Z","times_seen":54,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/Padlock-3.1.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/Padlock-3.1.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 170739\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-29af3\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mg2lXCCVCVeXpfLPsr4sNT5pexvjNne0l3rQUBN5%2FSiWyhw%2FCZH1GSFjH2uahBw%2B9spHQ%2BGrY6LF2Jo0u8QOM1rCX6tDMpmMcVsbH%2FZNaTe1HslePIDP03MgpulDliTYxc6ccCORT%2FM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853df3f712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170739,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1142 x 1142, 8-bit colormap, non-interlaced","md5":"1dd67cb4f0e66592c10d7108ac62a715","sha1":"82768ea86b40508c4c1b9fd0f4d4b5f1761c434c","sha256":"5c670c807c5a739a64badf59f2e99a5baa9be315851d190346d6392bbeda5499","sha512":"eddf158a95b70a6c6a366471f7adef220852f9f56a1f3c774f8be8c21f75713927a14abffad0d11a31ca3380601c4274b4404c8590e18300e02f8d8747b08693","ssdeep":"3072:oDxfgDuh6WNtkvdP2LBy5x0fPF/vo1F6s+Mi72odDd8vR:oDmO6WNOFPUBSx05wDeMS2odZ6R","tlshash":"a6f312df886fff841006ea3ac989b83db582ab8d27f32a85050d175dc9953e75053b43","first_seen":"2025-08-04T05:50:45.28331Z","last_seen":"2026-05-19T09:25:05.414216Z","times_seen":53,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/image-98.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/image-98.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 142351\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-22c0f\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=926my9w78UcQSpJhbUtpBCHC%2Bttg9s0ZE08YO2vAU1ZPatqR%2FG%2BcYzd%2F6ClQwgDulaw8IVMlrY8qMNtQoUrW0c1hkjZ5BJLErtSMJ%2BanGgAvXuWg20tXNacnApK3s0c8LjZCY1S5Y%2F4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853df41712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 397 x 415, 8-bit/color RGBA, non-interlaced","md5":"e27dbc1c113d8a7a761bbc6dcbd6ba9f","sha1":"aac4d21a85dd73624186212a01e8cc2c4e1c9c8e","sha256":"5ead4d639fbbf7f894e86c669408372d9f7d64864a72d52ec4c497f6277c8dca","sha512":"36863fd5eca9cc4228939238e7e3fafadf9a1871f15ef57c5bc5fb4be1741fb97e3a08e88895ebc4e8ebcd674ea720fdde26fdcd88b8f2333621c42c0c733ae9","ssdeep":"3072:ocGd/GE7gfjRB9+aWxAYmmu6SmiPmpxqZPKi6hWFjEA6w72SkyV:oc1xSAYmmu6nTpMNFzv2Sr","tlshash":"33d3133186e09dfa62550382947dc0d0de7d9f6ba5499b97d0046aeb08bfc2dcde2d4c","first_seen":"2025-08-04T05:50:45.30133Z","last_seen":"2026-05-19T09:25:05.396102Z","times_seen":53,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/Hero-Footer-Badges.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/Hero-Footer-Badges.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 344296\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-540e8\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dnwa3azvSXm7ViP4e4LwxBGKyLdy0qLKUD8ZuG0D5BMEpA9IDo95ET206efYnAEq%2BQwIgatkXoZ6%2Fh2U20LoWMQKo9X0CA41p3TW5YqtsKpO7qUv6QdMBpWEunl21GbCR26CfaRXFLQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853df42712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":344296,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 472, 8-bit/color RGBA, non-interlaced","md5":"a65ce645fdc6ad465a53ca3bfd8b00cc","sha1":"4c76f00f3e15f9045bf7272542c9a575c544f5bd","sha256":"f29e6b5e08748a405e244b0cf15814346f31b72e133c8efc1d5aee0a0dcc9dda","sha512":"9efbaed9aabecbcbc2c6eaec806b8fa66562aff6ba74b6141608177f040d499e406bd0286f6c7565e2d342746a695969ad48f351364d5126ee9aea53aad99d85","ssdeep":"6144:mx63o1BPH6kOzFGaXouVWGTLE+B/qQhzzKfJzIrT30oy7vpCx:m6QPyz5ZRv12ogoyLUx","tlshash":"4c74236894d2b71418493f25c3825d42a87151cee9d7fb58a573fdeada810cee7e8f00","first_seen":"2025-08-04T05:50:45.279463Z","last_seen":"2026-05-19T09:25:05.4181Z","times_seen":43,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/fav.ico","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:38.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/fav.ico HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:38 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TxPunEv2rvySsTDQ%2Bt1DXVr7%2BQJcmvP6sxQ0V87Ps6yk0Y%2BYlQ4MrbNzjIP0BH4%2F1KaHCGyzelHuMFc%2FmecGQTE2BRGfYeI1MKU7dG33S5tCqYq7YFwd%2FCPN%2FKFhcy0wUrMIDNXVXsE%3D\"}]}\r\netag: W/\"1536-63e46f9b42f1a\"\r\ncontent-encoding: br\r\ncf-ray: 9fe20857ab2c712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"72511b91a78d0f1e5a511be2cf4ba618","sha1":"ee7ae8abd759837303da4be58f45aee2e41c5683","sha256":"202b9ba61e36a6fd6c22a2598ec8405a65871480cb4a994509465fe1a2886e70","sha512":"9885e038a21d27ad16301da70a39e43079f20e275e6c75f764b4af4953a2444639e180016974b5e86e0c3f35c5e102f8fbb22f7c5268138216dd7c68c57cdd2e","ssdeep":"96:yZZU1xFFFFs+xdaahhhhhhhSjOxFFFF4:yZZU1xFFFFpvsjOxFFFF4","tlshash":"0bb106f95237b878c3e406793ec5bdfd2e294bc1fc24042476902e673995b2a1cb305a","first_seen":"2025-04-15T19:20:51.410266Z","last_seen":"2026-05-19T10:25:43.638751Z","times_seen":62,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/logo.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 1908\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-774\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DFZZ3YVlr%2FvNsn7Jx5NSinNC8aMvkXedy16tAn%2BCrLGaaJKAtwzDEVIOujbTYMDSBSxpBUwHCvdw9pUbYQnWXBi2Ll3WoW94OOuXvyDIkO2crE8w5cRiuyn5U3OOl1YzrXUBrmiy%2BAo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853bf24712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 51, 8-bit/color RGBA, non-interlaced","md5":"1d087f4b49d571becb05138581b37557","sha1":"815a2b1b704a09ed1cbe88ec2c7cb4ad7126fcc4","sha256":"e8c3b6b052600f0206205b802e8d6774da926f2b6cffd38a164ddac1714c5d3a","sha512":"ecbd6053b79a1171bade56a39aa5fc068ff0601fe6f20a26d5b406e1200c482f566c6aaaf29d650f5a5ff9fca5f24eda4dfad0a0624048f96ef6fcd81e534de8","ssdeep":"","tlshash":"99411bea5fa1167ec0cef39d0706f968312e967b200140977a57c6175172c7bd8e6560","first_seen":"2025-01-05T22:57:12.125142Z","last_seen":"2026-05-19T10:25:43.635052Z","times_seen":85,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/x.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/x.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 531\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-213\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sfv5KiQ31dam%2F3gRTB4iuNrz8Fl7s%2BM59ZnlkZ9cJzbLYiS4nipdH3Mr5C43FTPt5egSF7yLVTRg0fjdvKDjw8h6wVVMv%2BUr4tAmxN0wWej2Cv257um35wDZZen6HRThadvAKKf5qN8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853cf29712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"1724756d52613b74ed25743a875cb5a3","sha1":"a5036859985c49e8fbd04f5ec941a59b31444253","sha256":"4cdb9c5b06498749f661774cc98014f3c80a2ff80df70ad174b5aafa92f9404b","sha512":"448425ce53cff9703e478b3bca8510136eb1ded3a107bdb6c0bd6699586269c7ea6123c888877435d188bbac07020c854a6b692dfa17eb8568ad0aee9ebd464e","ssdeep":"","tlshash":"e1f020c2c3b820d4c606265b2a1a0213fc72868e043b0f3c93adf90a9908e849114e80","first_seen":"2025-08-04T05:50:45.274156Z","last_seen":"2026-05-19T09:25:05.430625Z","times_seen":51,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/image-89.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/image-89.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 110334\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-1aefe\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fi3cw8KGHMgi%2F73rhYk0W2j%2Fo5Qw3vHVWKseQJ%2BfdTIble%2BD9X8K7bHVRTYSNXnpdvNNTNUDGKc5hj3L8nSDZi4xHehWbEsYfy80cHNV7MrzBszHE8RdpW3bIqP5uPgCah3wsAJJSFs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853df40712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110334,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 623 x 415, 8-bit/color RGBA, non-interlaced","md5":"1079936c60f64c5da31c6d847e49b0dc","sha1":"259e15fba1b6720e7acab7b5fb0b051f3fe4db53","sha256":"e810944925f9d3fff2ba4753407d0a1efc80ca84de73e84f92f8fa4777919423","sha512":"8b0a8dd3239831f683faa25c5ed24308fcffb2c984b05bc66a0ff1c5f7f37fd466abc48c838a12a4a666b6a281d7e29996fd42ecfaa043137eca467504b5c268","ssdeep":"3072:ApTseiX8iwgWNm/CDxK5Za9bPJ+LQaEV7vHHzFc:8eX8iwgWaCDqI9bPg1o7Jc","tlshash":"e7b312de760801af503f5bec8f78505b6a4ab7c53b40e00fac45613eda4eaa70969773","first_seen":"2025-08-04T05:50:45.275988Z","last_seen":"2026-05-19T10:25:43.635905Z","times_seen":54,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/section-scroll-bg.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:38.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/section-scroll-bg.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 634961\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-9b051\"\r\nexpires: Wed, 20 May 2026 09:21:38 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G2LeIKmLpYGSQ9akS1z2mvW6s6%2B%2FLcUtuCi9rGlZcJut4gZtPW2qsHKdvyJHlWVsGddVmJ8WvV2%2FDzaSzc6t880DL3um6cpfp81bDH6oGiTOLsK5OAZ6jb8DLigN3oedoxx09JpTkD8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe2085578f1712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634961,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1393 x 1543, 8-bit colormap, non-interlaced","md5":"0a33b3d1e11494b3489c9668156c6f4c","sha1":"b6055cabc252060b281c478af7c547fa5e6914bb","sha256":"865f3b3e643eaa0460b6d665101132db6cfd914265be49a64510ed74a1c66847","sha512":"75bdcb689d106cc9ef39d5f2ef7db6c848d502f01a87b8ff09976fcbd9803cf7b9ef7be24228533155bbcc08e7b0bc9dc45d89ecf46a81feb64a6cf31b20d303","ssdeep":"12288:4H8Zloit/eXjvDpQP2qEMvkzywvDSzuZTwhwN4+eBh9He/KveIhba8i6pG+kY4+:4c8id21aixdLS8T6wi+eBh9+/Kvegba0","tlshash":"b5d42305673b07a6eba2e173706c6436f1f2319f1b6ee5865438a3896e58937f7024c3","first_seen":"2025-01-05T22:57:12.152761Z","last_seen":"2026-05-19T09:25:05.403016Z","times_seen":63,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/verif-stars.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/verif-stars.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 261826\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-3fec2\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9BkZIOVZL68raeJuAvN0Uow5nv4LAeMx2gneRFLZZzsZKEYo%2B32mcB%2FD1jP8kmrRDwrwz3W%2BjkCeS9bcDx%2FKEA%2FMav37lv%2FHYm59oNal0LMP8VMnaL45lLEo4T7OCevgan2b3WlFbxY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853cf2e712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261826,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1800 x 830, 8-bit colormap, non-interlaced","md5":"b315cde9b8714a92b3e181bb71056cd3","sha1":"b7902edb831374d78eb8d12be379658bfe7f5eed","sha256":"e488f2d40d280c97da8c08e9080e17e21d4a6b8c17f25fda6cb0a45f609392c5","sha512":"e639078cfe915d9f746e52647fba107da6a2eac4eea5cb158800e40652523507d5db7d49400e39ab60dd67c21f0ee02aba22956987be030ebf17ac59e22bd9ca","ssdeep":"6144:9gPuDxB3Qel47/ejvQGkEHjIQ5TaJyGVmw7MvHGZz3x:WPOHdlvQG3kQ5Ta5MvmZzB","tlshash":"82442336053181bba7f0f8d089f8ed5ac07421a5b6273f407b2b967a35d50992ad0e7d","first_seen":"2025-08-04T05:50:45.277773Z","last_seen":"2026-05-19T10:25:43.612994Z","times_seen":54,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/img-lok-1.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/img-lok-1.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 159228\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-26dfc\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BGjmiGfQw62URSpmhNjmtb3RB7pm8jOvXxRP19ZC3Jwp7FwVY68ITWXDqb9kPoT0Pn9HEwOwRdUjv2tjhsz4k%2Fb9AzvBfMH9oInQmCMwmpJXhBENpMmOjLRwo5VCGzGVTg6qdvFTWHU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853cf3c712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1142 x 1142, 8-bit colormap, non-interlaced","md5":"9547f79adfa3f6c9167ca4a1dcd80290","sha1":"e9e2ff9d768a1d2fb9349487239003903984ac94","sha256":"4ea0773c28c7bd66e1481b5190c79ebb87805d16966d41b39cd662d3384ed1e4","sha512":"04a9c4257275688bbc21b30162b1981c451337da466a1cbf8dec93d09028be72cd3adf1de30fdcddf8b87ebdf6634054d6898cf8a182f644a003f4659ac654a7","ssdeep":"3072:PXrp8Nb48fVffGr3sQEDDRhz59OaqTu/G97E6T9dUdCZSDHk:PbuNbLff+srDR2u/Y7E6T2CgDHk","tlshash":"42f312ddee711a39ea120735e056d7e93d014b2877778a5b7a4eabbdb05850c320073b","first_seen":"2025-08-04T05:50:45.28983Z","last_seen":"2026-05-19T09:25:05.394633Z","times_seen":53,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/favicon-footer.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/favicon-footer.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 9723\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-25fb\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z2%2BOaaxkGIBAQsHQuZnoFwxywqGdq4BWW9OjcKBPhJTbbmZ98Z7y2KK0HkMOLdc5%2FWdnrx%2F%2BkC%2BtfJKuHo3QykgPrjy0F8iqvoRyd5IwNZT9Z7s5o6aC1Ssw0b07M95NplmI6yGTsok%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853df43712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9723,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"fe49c10cfdc493be66542cae7f3e6f59","sha1":"c23e199cae62af8dc6e4526d220ac73204cda2f5","sha256":"04fbe4d4ab574583d9d5d40a1ad3fe53530e171be139548cf185ebeb28becfee","sha512":"299cb25d3f66a289c92d0dd75c65edd27c5d3f90f16f6e1d926eeaa7a3cfd1c838d5f6620eff3644f1f6cfb2de17c2849aa6937b933b4c9ed1af43c8e85d5e6c","ssdeep":"192:9zRD7W+lojtj3OFUDLq2CmzxHlc1vGtX/EbBcbq3bxiQ9KkuZjWufRE:xRD7W+lodfDnrxHlcBGtXsb9bxluVE","tlshash":"f8129eb322f5e4e41c43a6b5d2956b9fe92751438af032b0f5091a6e85c9eac4377340","first_seen":"2025-01-05T22:57:12.227124Z","last_seen":"2026-05-19T10:25:43.625345Z","times_seen":57,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/css/style.css","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: W/\"68bea482-785b\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SjBCWg8Pzw8QMXeM9l7VuDaLoOMzIX%2Bon9yjYVr8Qn7%2BBA3EPCNcrKMBrUypoIs6mIQH1C7NEXOWskZYAzPSsuttm3SK8ZBst6hcqFrA9eC0ZasYfwrMnvdgT10m6wH8LSbj5mUBMgw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853bf1c712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30811,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"966f6875a2d850f5630684b35581627b","sha1":"99c2c0be90615ce68e693928a823f540cbdc7438","sha256":"d0a3b2ee41168a6d397cf326efaa809f56f55b64077265ab09cff3d526066515","sha512":"2cc52a634f2c464dd0f2be35202e71c4e981cc3003a3e5cd620e4f3090183e57f2a3dbe7febb0e60b8747d4cb30fdf0048e3ee17e91d005a4424439fda76df32","ssdeep":"384:d+Exov6J5AD28fLXbh05DqbUjceSG9tm3c:d+Exq6wDQDqytD","tlshash":"d4d256cda6133141d233c6ba7fa31219eeb640234b1121987afd91549fbd07a5292fef","first_seen":"2025-08-04T05:50:45.302585Z","last_seen":"2026-05-19T09:24:58.590392Z","times_seen":14,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/css/jquery-ui.css","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /css/jquery-ui.css HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: W/\"68bea482-8c85\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wA8TlTsHZJMa5QEfZjEMreSsJVXkkGVoRPcYoa%2Bxf6BGRsEL1MmbvS0ZSCR8DmJylnbCxXXUbonwjmO889bx9ojocgH%2BzpvHmZfTzxuqqefphci1Q%2F3tqSvdW073IIA%2FUJHUSyzloS0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853bf1f712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35973,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2363)","md5":"c4a88ec0cb998929a670c0c58d7dc526","sha1":"03135a88e8dbc36020dd453d1e7407ce9a3a2cc2","sha256":"44f8a56d427917b5fa0dd7933ba545679be5e6b3b93099e64a4e29c2159f57c0","sha512":"fd0d6c06abcd661796db2bc071c2a2bbfc5cfe8d80b434b68cd068cc312a03ff0c93f21c1fce77c2bc03486a80765ee317239639c79f2edc03777918a36efa1f","ssdeep":"192:10OW02ANbMb6l2n+brGtUQnSMfps3+eYQY+h572hk//r8Y5Y6BjSmMErEURHllPb:xMb/+vaW1e07/PiF5fy/EzDS25qb","tlshash":"10f20c316b432919ba1bd1a425a11bf7e32e1342ee1b6e7f609a345cc3d54e0c0bf5b4","first_seen":"2023-04-05T11:18:23Z","last_seen":"2026-05-19T10:25:43.637544Z","times_seen":9258,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/js/jquery-ui.min.js","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /js/jquery-ui.min.js HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: W/\"68bea482-3e46c\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fzdw9z68woaWj%2FWwrjVD7QlTCZctRbWPOBQnI5Olkf%2BozrJmaqFyax9MZWiUeZ%2BrReU6fFhaoDLB0Usxa3tgvZBUR%2FaWvUsK8OtBlYQDCq7niGjpP0HMgu%2BTthKcrIBy%2FOpdrbM5jCA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853bf22712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255084,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64399)","md5":"1e2047978946a1d271356d0b557a84a3","sha1":"5f29a324c8affb1fdb26ad4564b1e044372beed2","sha256":"9528ca634fecad433d044ddd3e6f9ce1f068d5d932dafdbb19d8e6daea1968bd","sha512":"e7ba19fef5bc00d32347f290e817bdbfffbf87a6eaf7f9777f439ceef9faa8cab286f3ddd5cbca051596a73bb44289de226aabd929263b8312a94f91a47a26dd","ssdeep":"3072:eDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:uNdIVWjNS9cdzAV","tlshash":"8944f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","first_seen":"2023-03-07T18:39:57Z","last_seen":"2026-05-19T13:01:42.001354Z","times_seen":28174,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/inst.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/inst.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 345\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-159\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Uax%2B51%2B%2F3%2FDPtrMpIcD2qM1vULPVxC2GdBa%2FctcXOP%2FOzTjoDFU%2Fb0aBLagIZuSwe6L%2FfBA5lPKOJqodzd78oivSvOoCcWryREedrcw6oRStnJoatwj8wbWaz80FI1W5pqWbmf5P6E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853df46712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":345,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"5ee082bb4534fbc6b341279378fb72b8","sha1":"30c9e24461d8baf87b540534d5e6ca39326a75b7","sha256":"156b40c57497b4cf64d1d6e6a05e56a568b4935636a6ca873246fec7166a21d0","sha512":"b16b4bfd7cba2812431fbe71ef95f43026d4cd9e2f4e318d59c851c7698996c022548f47b1ed150d2b371027a09ba0613a3a4f77e141f68a8f3ae5c0ab54d4c8","ssdeep":"","tlshash":"92e0c6ce5348097bf64db862603f12228cb303ba02098a8bd048e12876466a5856b4e2","first_seen":"2025-08-04T05:50:45.285514Z","last_seen":"2026-05-19T10:25:43.616442Z","times_seen":54,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/section-main-bg.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:38.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/section-main-bg.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 886631\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-d8767\"\r\nexpires: Wed, 20 May 2026 09:21:38 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U2xtWaSM8gew9R1rlbG9IuTlZbRECWBLJZ6yPRU%2Fh7Ijc3b%2BjevcfvuzMTxXDQpSoLAQ%2F%2FFqdCcVOmjPqyTo%2FaeA0mnAAXMySx68KHkpGEqrnLSAuDvdPThuhlkX7BOVKBkt3Xp9PL8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe2085578ec712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":886631,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 1715, 8-bit colormap, non-interlaced","md5":"da71280b849b9a45f8330bc9e47068b6","sha1":"26efd7f9fd345951e33797171dd6086f51dda5b0","sha256":"f8994a13a1059cc0fcbe42a96a53baa258510351a7426407403c58471ef36d62","sha512":"9edcf3a647fa70b71bf9dc1d76b914f581eb48f704e1acb60fcc67c52e27801a113725698bc957ef19dc30e110cf65868fdf9a644b4da35fc8b8ef0e1f31570b","ssdeep":"24576:aeQekcUrO5nXPY8e2f1PjDD0dBlTt6p+zEgV9waSxBp:s9wXg8eWj30dB0YEgUaGp","tlshash":"1c1523c09df87caad5a78b78a36c739d84c8320a452d6880311f536ee7a7d73179d271","first_seen":"2025-01-05T22:57:12.150607Z","last_seen":"2026-05-19T09:25:05.401938Z","times_seen":62,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/down-arrow.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/down-arrow.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 390\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-186\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7nXFfVWvB08CbJap79I%2BpGs0MsHVH6yuNJeP8Fd8vkmWHHbeofvL60YiD5REnkWoXto7TYI3PLeW2oJeplTJbYj1IBSsxOXR4tuaM%2FhXh2g%2BIvIowiFRVeDEJBuyyDA27pnm7Vv5Qsw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853cf34712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":390,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"38119c48d069b72bc7dca826fa26e510","sha1":"f794a0a3fd38850354b4b7210da59cfe3f5211ca","sha256":"c73580fe1bf2daff4f00c04a86d2da738c9f6259da1ae2d2795a220e4ad12a28","sha512":"a3fa50328ed4b3a5938f500d571ae830d8a9043d18a2c818e65a3cb945045cf7f1811dfc11b8517c4e61ac161f2e9c0babf428516b3619c34506b1497fa74664","ssdeep":"","tlshash":"10e0f1caf342a4e5e33827390f1f02f0a91f1f4817150033640388b4b06371958ca9b5","first_seen":"2025-08-04T05:50:45.293001Z","last_seen":"2026-05-19T10:25:43.641047Z","times_seen":54,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/3.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/3.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 64425\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-fba9\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RETZQ59tNrCcoLreTktkL3eOXtUynI%2B36Art49CgUiqKqSkSd%2BCKnXsbY%2FYKE%2F%2BMbnjTm72mbZ%2B56l8Jx0DLfXUDkJO4bqPNqxi3X1ToQi0qf0r6PiTDJzx5sgJEKjrjU0oe8eRKXtA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853cf36712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64425,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit colormap, non-interlaced","md5":"52d9b9a3719911d6ef69def159dcbf29","sha1":"5f196e3fd93f5c3f9e76d22c7cc58ab2e5cec9a5","sha256":"72026f31c08a3db779d72065bc9578949abf311f3c9cf9628bd4c45f30786880","sha512":"191f280010c400faed826bf825674b791d9617d62f8023418172ea58b681c6d0f5010f8133f309336b1622910bc97590e73f76554a7dec3735441a5cfb8d7e57","ssdeep":"1536:dMXt4FgcSylEWag7RGTHt5NNhxuMNxZHRyVBz2K:2XS+cZlggQNXNWoxZQx","tlshash":"3b53014a9d64a2c2f148da32256938f62d2716cbccc487c6ff6d9e43af012bdc16d791","first_seen":"2025-08-04T02:14:22.602842Z","last_seen":"2026-05-19T10:25:43.613747Z","times_seen":56,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/img/facebook.png","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:37.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /img/facebook.png HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 742\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\netag: \"68bea482-2e6\"\r\nexpires: Wed, 20 May 2026 09:21:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hsr%2BncUSJsf%2Bc8XizQP7uEEj3k8U9%2FlNhSOipAWLiBGHc2SYPb9XKLNFy56txBjaSe7WdyZXO2Zcu5aQet1y%2BFWlBsdfdEUwBQeVXgjYFa369EfA%2Faq0en%2FM6NwuJnKuDxVkYJ1CJx4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fe20853df4b712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":742,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"32158f84f0ed03527d8785207ce38719","sha1":"4fecb0c9a496cafef7af09c7bb6963a04e76eab8","sha256":"01b257b254cea6ab5d9590d3a41b43932ae7f9dfa6d7894dd78cc76f60e89972","sha512":"1299455ab3e84378d523c7d8525631642d785376382da1ee4aa8cd6e754e6bc65ee0479577c45ca6890333d90b3b189e45cd370bf7605b8db4ba30c2df4a9fe2","ssdeep":"","tlshash":"500165af6d9d98b183188d24a5eb4456de0f188e10725d7c4feb06b4117314c2b0e72f","first_seen":"2025-08-04T05:50:45.287293Z","last_seen":"2026-05-19T10:25:43.629516Z","times_seen":54,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit-verifyauth.com/font/Play-Bold.ttf","fqdn":"faceit-verifyauth.com","domain":"faceit-verifyauth.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faceit-verifyauth.com/","date":"2026-05-19T09:21:38.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-verifyauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 02:45:58 GMT","end":"Tue, 11 Aug 2026 03:45:50 GMT"},"fingerprint":{"sha1":"D6:D6:0E:F0:2F:B2:74:6E:60:66:32:BA:11:35:D9:0C:0C:F1:4E:DE","sha256":"F1:54:A7:8C:59:2A:2B:12:FB:79:C0:E0:2F:8D:CC:E5:F9:41:82:2B:B9:1C:E4:9C:80:26:CA:BD:EE:F1:09:23"}}},"request":{"raw":"GET /font/Play-Bold.ttf HTTP/1.1\r\nHost: faceit-verifyauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit-verifyauth.com/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 19 May 2026 09:21:38 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:40:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j7x1uEV47pvuAKOxsUmmZU6%2FoB4hW4Mj3Zo4lynTG2dbuGDijff4vzGKKTa%2FljjrDPMoOfbccqDYZ9KPLtWVKrE6pQXc%2FLLR3VYIRcssHTgvJy641PY8NIL4Np04X960sdqcI2fWwso%3D\"}]}\r\netag: W/\"34578-63e46f9b40fda\"\r\ncontent-encoding: br\r\ncf-ray: 9fe2085588fe712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214392,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"FFTM\", 26 names, Macintosh","md5":"3fd68d00f407b74752d3cc00b30d7b67","sha1":"03d54a8302aea486f8eea785f8b4014f477378d6","sha256":"96365fee2e462288b62968f664e14f722a7cdca04f038945170cb5733701efcb","sha512":"85724a1a2dcb3e7e88d089d527a248ad6b4f01aa90cf333f4921e1da73fc61e55f1396ea6bb822aeeb493c3b2761381980541d11aee69a9bfed52032b4a6666b","ssdeep":"6144:ETkQHlVyp8wrkmn8lh3cHIydFnW20SuMeFYYcMzbLVtXLpY8bX3zy5TTZlniHrdT:EzlVyp8wrkplh3cHIyFnW20SulyYcMzT","tlshash":"52246b4b7f5fd702da261e75196d1313a7e1f922ab4a578ba4093bb8dcd30d81c026cb","first_seen":"2025-04-15T19:20:51.406103Z","last_seen":"2026-05-19T09:25:05.429395Z","times_seen":50,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"faceit-verifyauth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}