{"report_id":"29e19493-baa5-4926-9825-47a3e2792663","version":6,"status":"done","tags":[],"date":"2026-01-29T09:33:34Z","url":{"schema":"https","addr":"faceit.auth-vexarena.com/","fqdn":"faceit.auth-vexarena.com","domain":"auth-vexarena.com","tld":"com"},"ip":{"addr":"87.249.38.179","port":0,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"faceit.auth-vexarena.com/","fqdn":"faceit.auth-vexarena.com","domain":"auth-vexarena.com","tld":"com"},"title":"FACEIT Cloud Events","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"faceit.auth-vexarena.com/","fqdn":"faceit.auth-vexarena.com","domain":"auth-vexarena.com","tld":"com"},"ip":{"addr":"87.249.38.179","port":0,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-05T09:33:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"faceit.auth-vexarena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn1.iconfinder.com","ip":{"addr":"104.20.38.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-02-23","domain_rank":518439,"first_seen":"2012-07-15T20:26:59Z","last_seen":"2026-01-22T15:47:39.593217Z","alert_count":0,"request_count":2,"received_data":31502,"sent_data":996,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"faceit.auth-vexarena.com","ip":{"addr":"87.249.38.179","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":10,"received_data":227068,"sent_data":4532,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery UI:1.13.1","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-25T22:14:35.458366Z","alert_count":0,"request_count":3,"received_data":46044,"sent_data":1633,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2026-01-28T16:00:13.327628Z","alert_count":0,"request_count":17,"received_data":1595755,"sent_data":7509,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-01-25T22:46:21.910908Z","alert_count":0,"request_count":2,"received_data":541577,"sent_data":906,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":1,"received_data":2794,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.gyazo.com","ip":{"addr":"104.18.25.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2007-08-31","domain_rank":157397,"first_seen":"2014-03-14T09:33:51Z","last_seen":"2026-01-29T04:55:52.924325Z","alert_count":0,"request_count":1,"received_data":57544,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"distribution.faceit-cdn.net","ip":{"addr":"193.41.200.102","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"domain_registered":"2019-01-23","domain_rank":574249,"first_seen":"2019-11-03T14:26:45Z","last_seen":"2026-01-22T15:47:39.658244Z","alert_count":0,"request_count":1,"received_data":126723,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-25T22:25:20.721908Z","alert_count":0,"request_count":1,"received_data":31787,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn1.iconfinder.com/data/icons/smallicons-controls/32/614333-cloud_check-512.png","fqdn":"cdn1.iconfinder.com","domain":"iconfinder.com","tld":"com"},"ip":{"addr":"104.20.38.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconfinder.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 21:20:48 GMT","end":"Thu, 09 Apr 2026 22:18:23 GMT"},"fingerprint":{"sha1":"90:76:53:AA:D7:20:9E:F4:3D:3D:89:52:6F:D2:BF:AD:41:BF:13:9C","sha256":"28:0D:C8:F9:9D:71:60:CA:44:DF:D0:29:54:42:B2:0A:68:8F:2E:F8:E4:4E:95:DB:63:73:7E:C0:65:25:3F:7A"}}},"request":{"raw":"GET /data/icons/smallicons-controls/32/614333-cloud_check-512.png HTTP/1.1\r\nHost: cdn1.iconfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 14885\r\ncf-ray: 9c57b9ab585856ca-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"614333.png\"\r\ncontent-security-policy: script-src 'none'\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=LY%2BKLzQiqbd%2FBcrsCbevKcMaoiwgkWdCs1vkVTaOhdU%3D\\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\\u0026ts=1768156964\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=LY%2BKLzQiqbd%2FBcrsCbevKcMaoiwgkWdCs1vkVTaOhdU%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1768156964\"\r\nvia: 2.0 heroku-router\r\nx-request-id: 93c37815-a31d-def0-a798-cd0ef55f15df\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 18:42:44 GMT\r\nage: 1522212\r\nexpires: Fri, 29 Jan 2027 09:32:57 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1137\u0026min_rtt=502\u0026rtt_var=1150\u0026sent=19\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=18193\u0026recv_bytes=1235\u0026delivery_rate=22022813\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=812f180deed769ec\u0026ts=36\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14885,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"cd2ac2081ae8aaca33967a69539c7a27","sha1":"95f332a80efcc29e76f3b9800de94f067649f1da","sha256":"c1426e9671368ccc94aa8828437cfd53bb01ac5cdc75662ac3aedda920edc2e4","sha512":"18e6e1074e10e88f2841a8a4a60f08eeaa6df0363a44b40af3b306cc679cf81d0740718c2f1fde0829d7541f9dd68e42378ed7b0510e189be234a1e96a8f36c7","ssdeep":"384:S8rcD7rdjjXx4ej1X7N06TcOxYO+x4x2Sw56Dss:cTdjjBr6scZbAVwYAs","tlshash":"f262c0dba938249aedb10d7fd9a22b6a528c94f415431de9038a9335e7c0007de666ec","first_seen":"2025-09-21T14:18:01.386567Z","last_seen":"2026-01-29T09:33:39.788113Z","times_seen":74,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":271,"dns":0,"connect":3,"send":0,"wait":17,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/M7UIaEU.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /M7UIaEU.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 27 Jun 2024 04:41:42 GMT\r\netag: \"23ca77c3830d55d96121f2f95f08cb91\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: bzn6MfuHfJ3SaLbbiZ1hrDSnoyrJnzIxAZfnKqHKU9gYVjm8huRjlw==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 2554996\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\nx-served-by: cache-iad-kiad7000038-IAD, cache-hel1410025-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 566, 0\r\nx-timer: S1769679177.292827,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 6754\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6754,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 194x194, components 3","md5":"23ca77c3830d55d96121f2f95f08cb91","sha1":"a3f94ea50c5fef54c203dc1aa0dcb9999b9a0d54","sha256":"85a47f036d3dee7e600c962dc878348073454d41a1f82718d8aa1c69896316e3","sha512":"de10eca714ab6eac6787083b89b64e42f52f42908166de6d9e649409b85b1ec29b0f9adb51cae5a723f47c4e85b1bb82ec3f9f4f25c98fe45f3b0d738bca2819","ssdeep":"96:DIUsOuE77S2Dee6TlmGvkE3a/O2PLoCSL64LnGbap6vIDzPboQX8yhkZTR9O/5/4:DtuE77S2wsE3sL8ibkFMm8ToRSh","tlshash":"13d18d8eed97590799b437bd58f698dce3ba0b1fc1bb668408942ac01e86f069d0dc42","first_seen":"2025-05-25T22:18:04.392293Z","last_seen":"2026-02-09T13:54:03.50627Z","times_seen":77,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":45,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit.auth-vexarena.com/js/style.js","fqdn":"faceit.auth-vexarena.com","domain":"auth-vexarena.com","tld":"com"},"ip":{"addr":"87.249.38.179","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.auth-vexarena.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 14:03:00 GMT","end":"Tue, 28 Apr 2026 14:02:59 GMT"},"fingerprint":{"sha1":"AD:F4:98:59:8B:F7:54:22:DA:74:D9:94:93:43:80:8F:3E:2A:36:4C","sha256":"02:1F:46:D8:B9:6D:FE:28:4B:E2:C9:57:21:07:07:D4:C9:1C:82:A8:1F:6D:CF:21:68:9E:48:B8:86:B0:0D:91"}}},"request":{"raw":"GET /js/style.js HTTP/1.1\r\nHost: faceit.auth-vexarena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.3\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sat, 17 May 2025 18:57:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6828dc1e-4d2c\"\r\nexpires: Fri, 29 Jan 2027 09:32:57 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19756,"size_decoded":0,"mime_type":"application/x-javascript","magic":"data","md5":"4e8d775978c684f02346abf29abc4f75","sha1":"259878f413f7d0d560555eb86d92272206a3ec17","sha256":"d2a40ae61ce391fbbc7ee02eea4e63f6d85b21fb6cb434e46f18b24872aa582d","sha512":"a6df4ac8c01d8951e7c1c54f42cc75f6b24782337b375f1299d367504730bd15d3d27202adace6253b5c9c5bd965a2616961ecb0ca7170ae7e83018d61ba01b1","ssdeep":"384:lWrMBbDKCaa3VOWAnF6upzAMFJtCby0GssEpVA6frm/JzTIQ:U3mV0nF6aAQey0GhOA2Mz8Q","tlshash":"4292d1feb5a3b0c1829f603494b2196e4abd80b088d9fe64c0f3d54256bc27d18df95b","first_seen":"2025-05-25T22:18:04.388509Z","last_seen":"2026-02-09T13:54:03.535003Z","times_seen":77,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"faceit.auth-vexarena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.auth-vexarena.com/assets/css/main.css","fqdn":"faceit.auth-vexarena.com","domain":"auth-vexarena.com","tld":"com"},"ip":{"addr":"87.249.38.179","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.auth-vexarena.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 14:03:00 GMT","end":"Tue, 28 Apr 2026 14:02:59 GMT"},"fingerprint":{"sha1":"AD:F4:98:59:8B:F7:54:22:DA:74:D9:94:93:43:80:8F:3E:2A:36:4C","sha256":"02:1F:46:D8:B9:6D:FE:28:4B:E2:C9:57:21:07:07:D4:C9:1C:82:A8:1F:6D:CF:21:68:9E:48:B8:86:B0:0D:91"}}},"request":{"raw":"GET /assets/css/main.css HTTP/1.1\r\nHost: faceit.auth-vexarena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.3\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 17 May 2025 18:56:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6828dbde-637\"\r\nexpires: Fri, 29 Jan 2027 09:32:57 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1591,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"03fee5f7b12464fc0a6d5b86d09686e0","sha1":"587b346586127d2a0f4e42004f5d7448031ea8df","sha256":"efb46a88abede5f0b55f9c78b8988b65961ac78b86719eb7d30d943bc1f09435","sha512":"88c87c69c8991b3cef308a0bd884da263a89f5f68cb8a4d46bc7878717ce725e1eee70f23e0002fa0e8117fdc244ba402f7052be0ccf428720c22b904cce3fba","ssdeep":"","tlshash":"c431c1bdc54a008373379d7453b6662afe955163860a46b83ec025888ff81b8d692fcc","first_seen":"2025-05-25T22:18:04.389692Z","last_seen":"2026-02-09T13:54:03.518457Z","times_seen":77,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"faceit.auth-vexarena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/LCWKYae.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /LCWKYae.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 27 Jun 2024 04:42:01 GMT\r\netag: \"c185be4972e3464660b393942a581700\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: UU7RYapQiQ-VSFYG-ubJJ082bTghh4Vn9EWIhHwyv_5kpp0QNLUxzw==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 583414\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\nx-served-by: cache-iad-kiad7000169-IAD, cache-hel1410025-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 45, 0\r\nx-timer: S1769679177.304445,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 31412\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":31412,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 347x347, components 3","md5":"c185be4972e3464660b393942a581700","sha1":"ede9f3d74fdddcfda8b26afd02714a912dde458e","sha256":"cb0fec633254cc76006929e85d7533d3c7b39160803a13eefb359a465c3fa12a","sha512":"a36bfee19031b03d1c0a163af449d2b447fdeb78d736e39d092e162647ad3378ae3efcfda0c28a52f323b36aa134f360647d18a42bfd368fcc98cb6a8e7b9395","ssdeep":"768:lRWhehG4BQRpIxv/jfZpt4RMtlrpEWnah:SheXBvjRpe6tlrpEWnah","tlshash":"4be2e1b5d6161d617e662839e32fe6281c525276c0e8a262c0c98c6cf5cc5f5db7c3cb","first_seen":"2025-05-25T22:18:04.393429Z","last_seen":"2026-02-09T13:54:03.598044Z","times_seen":77,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":95,"dns":0,"connect":0,"send":0,"wait":51,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit.auth-vexarena.com/fc2/assets/css/style.css","fqdn":"faceit.auth-vexarena.com","domain":"auth-vexarena.com","tld":"com"},"ip":{"addr":"87.249.38.179","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.auth-vexarena.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 14:03:00 GMT","end":"Tue, 28 Apr 2026 14:02:59 GMT"},"fingerprint":{"sha1":"AD:F4:98:59:8B:F7:54:22:DA:74:D9:94:93:43:80:8F:3E:2A:36:4C","sha256":"02:1F:46:D8:B9:6D:FE:28:4B:E2:C9:57:21:07:07:D4:C9:1C:82:A8:1F:6D:CF:21:68:9E:48:B8:86:B0:0D:91"}}},"request":{"raw":"GET /fc2/assets/css/style.css HTTP/1.1\r\nHost: faceit.auth-vexarena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx/1.26.3\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 196\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":196,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-06-08T21:13:00.410267Z","times_seen":104176,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"faceit.auth-vexarena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/RvzeQhn.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /RvzeQhn.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Mon, 11 Nov 2024 18:18:55 GMT\r\netag: \"f87d885ddac2edaa21a5266f1f8ae99f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: B-Bz7Ah_7NIh7zaiISFfquHjS2mtMjhrDPjVcggOrvKF0Bnd_oxfrA==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\nage: 1066425\r\nx-served-by: cache-iad-kiad7000166-IAD, cache-hel1410025-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 395, 39\r\nx-timer: S1769679177.318732,VS0,VE0\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 42745\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42745,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 233 x 216, 8-bit/color RGB, non-interlaced","md5":"f87d885ddac2edaa21a5266f1f8ae99f","sha1":"8256ef7281b946fb60bbfa83a52ceadcc5174197","sha256":"df25c12997d916c1309e972b85fb2d81902a69b324f9e3926cb2c3dbbcf0b265","sha512":"1e08444cbbdd79dbe4d6f17e0225997542185403359255bc70bd442a266bfe5c264accd5255d3a6e167361eead70a149f468c95cbfb1024e4a660c641d308533","ssdeep":"768:sYCQ5ENerkBO1O0ifeZO08kUq7TYueyr9qnbAH/WHIuwI7dUUA024x2Qjc4BwnnD:sbQoIkBOg7/0J75eyronc0IuFRUUy4vw","tlshash":"7f13f2a3010ab72ffe4d7d95188344878385dd920687cf15975d48342ebe2b63f6d467","first_seen":"2025-05-25T22:18:04.378651Z","last_seen":"2026-01-29T09:33:39.795872Z","times_seen":76,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":128,"dns":0,"connect":0,"send":0,"wait":31,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit.auth-vexarena.com/img/steam-white.svg","fqdn":"faceit.auth-vexarena.com","domain":"auth-vexarena.com","tld":"com"},"ip":{"addr":"87.249.38.179","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.auth-vexarena.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 14:03:00 GMT","end":"Tue, 28 Apr 2026 14:02:59 GMT"},"fingerprint":{"sha1":"AD:F4:98:59:8B:F7:54:22:DA:74:D9:94:93:43:80:8F:3E:2A:36:4C","sha256":"02:1F:46:D8:B9:6D:FE:28:4B:E2:C9:57:21:07:07:D4:C9:1C:82:A8:1F:6D:CF:21:68:9E:48:B8:86:B0:0D:91"}}},"request":{"raw":"GET /img/steam-white.svg HTTP/1.1\r\nHost: faceit.auth-vexarena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.3\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 945\r\nlast-modified: Sat, 17 May 2025 18:57:00 GMT\r\netag: \"6828dbfc-3b1\"\r\nexpires: Fri, 29 Jan 2027 09:32:57 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":945,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5d77ca98c537825fc039725c4faa64c3","sha1":"df9c9eca2d864a082cf7d9c7d54840d79fd435c9","sha256":"427672bd72ef313536b7312e90a2f451421a78c3b159715aa6f4b80068696c8b","sha512":"0377c47f63c1261d51eaf4df3ef4f58e9d1ac0c110e7e09396cee76837cb7422583f7a7744c0e53ce8f42a7855738a04e9df4dd2cfe0658dec3f3d8a766bd626","ssdeep":"","tlshash":"b1117df51bbc040c60cf8abae71724a1336e64bd7d9581be9c7ec962438a455fb03c61","first_seen":"2023-07-30T19:26:51Z","last_seen":"2026-02-09T13:54:03.548531Z","times_seen":81,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"faceit.auth-vexarena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.13.1/jquery-ui.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /ui/1.13.1/jquery-ui.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-3e46a\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\nage: 4383630\r\nx-served-by: cache-lga21975-LGA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 48, 4698\r\nx-timer: S1769679177.313598,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 67637\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":255082,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64399)","md5":"842e3946fa938e62f185abb29ab00dc7","sha1":"c72ff777806f59b02c8e9fd84ac258051d2a2b39","sha256":"793cb14b4ae48e92c4a35eae5d34b4b95092e3cd7995ce342b6895a560ef7526","sha512":"d4ecd1c8d89773626a38cab9f3c6735dcf49e5ecbc303a13698b140805d03761f4b9e6a4272d7b8a3f101f4f130f59cc68231eb5ee2d3bb73151d374b7419a14","ssdeep":"3072:PDUNddBFak8JUaaDp9ujVOUc9Lb5VppuzpPMI9fB8NNU5BFfCAV:ANdyVSjoh9oW7fV","tlshash":"3844f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","first_seen":"2023-03-07T13:16:24Z","last_seen":"2026-06-08T19:58:11.267093Z","times_seen":1826,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":1,"connect":27,"send":0,"wait":28,"receive":32,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit.auth-vexarena.com/config.js","fqdn":"faceit.auth-vexarena.com","domain":"auth-vexarena.com","tld":"com"},"ip":{"addr":"87.249.38.179","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.auth-vexarena.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 14:03:00 GMT","end":"Tue, 28 Apr 2026 14:02:59 GMT"},"fingerprint":{"sha1":"AD:F4:98:59:8B:F7:54:22:DA:74:D9:94:93:43:80:8F:3E:2A:36:4C","sha256":"02:1F:46:D8:B9:6D:FE:28:4B:E2:C9:57:21:07:07:D4:C9:1C:82:A8:1F:6D:CF:21:68:9E:48:B8:86:B0:0D:91"}}},"request":{"raw":"GET /config.js HTTP/1.1\r\nHost: faceit.auth-vexarena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.3\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 49\r\nlast-modified: Tue, 27 Jan 2026 17:44:23 GMT\r\netag: \"6978f977-31\"\r\nexpires: Fri, 29 Jan 2027 09:32:57 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with no line terminators","md5":"6140984d95ac80a329dd4042282889e9","sha1":"201e32310f8dc563c343135baff3adb66fc6f298","sha256":"ea4ad87a96deb48fa81f5702ca67d8e278fbf9d4bcb1fc93d4773b14772d471d","sha512":"c7191dca6fe9b57008fd15c81a74302a022f3a4d64d0d213c27e98f6e3bd5c0761d5f3581d97321f2825593c5528e04338adc367fe2be8a2ab9cb9c76808352b","ssdeep":"","tlshash":"249002f24826040199541fa08109d8186142547a659841c55464644406815311390a74","first_seen":"2026-01-26T15:25:30.976509Z","last_seen":"2026-01-29T16:57:05.0552Z","times_seen":14,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"faceit.auth-vexarena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/4AzsPWO.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /4AzsPWO.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 27 Jun 2024 04:33:25 GMT\r\netag: \"3ce7033f225e8739b76392104dcfcddc\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: Udp-Y_GXflP3PKP-017_vryv9Ysqpvit8XLvDWUR6AMpq_5NdpaH7Q==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1277932\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\nx-served-by: cache-iad-kcgs7200176-IAD, cache-hel1410025-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 169, 0\r\nx-timer: S1769679177.292126,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 110173\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110173,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1080x1080, components 3","md5":"3ce7033f225e8739b76392104dcfcddc","sha1":"af05d51b02b449e6eb126a71fc37046cb07e332d","sha256":"bad31f479ba3250b932ff75cd53c01c5192ea9e2a3c19efda86d4235cab9678c","sha512":"36a765aa32d86e3e6e9d08fb3cd606ec863a6770dcf06563f0bc88e7a5a69b8b0cc2dafe0fd143d291d19f954ac5dcbcf7e28b6691074f15bbf6b7db7ac97c07","ssdeep":"3072:U5fv+Ut9MSzMUKfG4o/sGOOL0MWgELtME:Wv+Ut9lzMUBhsJ5TLME","tlshash":"40b31256d7a12782dd148abc830cf14ece7b3c79852ba258453fc9a7c6b2b148e2d719","first_seen":"2025-05-25T22:18:04.372918Z","last_seen":"2026-01-29T09:33:39.79979Z","times_seen":76,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":16,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Play:wght@700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css2?family=Play:wght@700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 29 Jan 2026 09:32:57 GMT\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"20dbf09d90f8db547cc5f73663273ae1","sha1":"fb93ed9e4acc847cd6d569dd0b16838bae80243f","sha256":"ea3f5f70c228984ffa7043d859367eba84ce42e115241b4d3c6f918d4f3cacf8","sha512":"ed4e2515e518990b6bf93818d998bec1570ec4603c1774a4a1dcf709496dc75c0cdc2bd13451edb206352e275cd93f0ed08cd48db605941bc576b542b7596764","ssdeep":"","tlshash":"fc41a9d7006ad850ea570cd223df7e369d4e61257054c179affd28ccacdac2a1321b0e","first_seen":"2025-09-21T14:18:01.410084Z","last_seen":"2026-06-08T04:06:03.224806Z","times_seen":97,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":275,"dns":0,"connect":7,"send":0,"wait":20,"receive":0,"ssl":283},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/mxt0Sqg.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /mxt0Sqg.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Sep 2024 18:55:28 GMT\r\netag: \"9583ec793a0a49da3ed5031355871ece\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: Wav8TKQs_WvZYN03W4rt9n3jIWgqtKbcHcjZaVoFWOrorWhLZ6ms1Q==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 2555013\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\nx-served-by: cache-iad-kcgs7200082-IAD, cache-hel1410025-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 651, 0\r\nx-timer: S1769679177.292799,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 26031\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26031,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 236x236, components 3","md5":"9583ec793a0a49da3ed5031355871ece","sha1":"9fe6b11ea5c4ac3af0ca86767bb1a16f531bfc17","sha256":"1176cdd5ebc0b361cfc1ff93053f437f04c4f0b455ca3b8bd4ed5b4e50943bc1","sha512":"a5d0881d8f48ec8c84267979f1a21f7ccdfad3c87d1b567368f49fc46ba4cca72a2eb47a8e4d699da041afac53750409ab87d04feb2c4236000382e17c03d1c7","ssdeep":"768:q+XovXPl88VI9z/pokDZHATDmuPSE+jCWx11+:q+Xo/P09zBoQZHAFPSlCs+","tlshash":"61c2e178f9bc317e9e4918f2db87258426997c4ad25bcafd2c5108934af90b93886542","first_seen":"2025-04-20T18:21:26.191039Z","last_seen":"2026-02-09T13:54:03.540394Z","times_seen":77,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":55,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit.auth-vexarena.com/img/logo.svg","fqdn":"faceit.auth-vexarena.com","domain":"auth-vexarena.com","tld":"com"},"ip":{"addr":"87.249.38.179","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.auth-vexarena.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 14:03:00 GMT","end":"Tue, 28 Apr 2026 14:02:59 GMT"},"fingerprint":{"sha1":"AD:F4:98:59:8B:F7:54:22:DA:74:D9:94:93:43:80:8F:3E:2A:36:4C","sha256":"02:1F:46:D8:B9:6D:FE:28:4B:E2:C9:57:21:07:07:D4:C9:1C:82:A8:1F:6D:CF:21:68:9E:48:B8:86:B0:0D:91"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: faceit.auth-vexarena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.3\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 17 May 2025 18:56:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6828dbf6-5b0\"\r\nexpires: Fri, 29 Jan 2027 09:32:57 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1456,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0432fee0a92332521c3c2b3f421c1fa2","sha1":"dd85353063219e76f3befd93d3d366918d577894","sha256":"5e3b83bac722cd251c08c5191d719e55f552a14402f7a23b23f4978b629c0e69","sha512":"19ac7a705e9e5613d88da3480cf23545f6944eacab9a173fd844d651e4bb8e1dfd8105cf679d6f36aaa339242eaaca6f5b7bd9e312d9940b8caa84253813929a","ssdeep":"","tlshash":"f13142d92614e25c9b93cb4d6e1da869b249a0fcf49280c6952dfb74c1427c4ca05e28","first_seen":"2024-09-19T22:33:02.822401Z","last_seen":"2026-04-23T13:39:24.868513Z","times_seen":91,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"faceit.auth-vexarena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.auth-vexarena.com/midway/app/js/main.js","fqdn":"faceit.auth-vexarena.com","domain":"auth-vexarena.com","tld":"com"},"ip":{"addr":"87.249.38.179","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.auth-vexarena.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 14:03:00 GMT","end":"Tue, 28 Apr 2026 14:02:59 GMT"},"fingerprint":{"sha1":"AD:F4:98:59:8B:F7:54:22:DA:74:D9:94:93:43:80:8F:3E:2A:36:4C","sha256":"02:1F:46:D8:B9:6D:FE:28:4B:E2:C9:57:21:07:07:D4:C9:1C:82:A8:1F:6D:CF:21:68:9E:48:B8:86:B0:0D:91"}}},"request":{"raw":"GET /midway/app/js/main.js HTTP/1.1\r\nHost: faceit.auth-vexarena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.3\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sat, 17 May 2025 19:07:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6828de80-222e4\"\r\nexpires: Fri, 29 Jan 2027 09:32:57 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140004,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64778), with CRLF line terminators","md5":"9e3e79c778cc75166de5157e5e25c95c","sha1":"9cda0c402834b0d4ef0e16c1857f8e49f167d05b","sha256":"75d7e2d368213b78f7c585095d93238ba68137c755865993ad4c592c956bae0d","sha512":"64efc799f15b3e6224f8eed0db3c0bb89991af9025697e26093f090445c6e5087a16354d4d9bd1db045ddffbf690423c53f99fba3be1ace208ad0c18c61c648d","ssdeep":"1536:29uae0GyJmn349ngcu3q+R16ao86Kez+NAVE7o9Vcm9i8yDUTY7L1Vq37uM1nWS5:29uaJ9nBBFzmOVcm9i8zTY7pVqsmVLXz","tlshash":"12d331c177d2bc4712475b32331ab6f9e52a5ce9b08849cef144bda0f0ad922fad45b1","first_seen":"2025-09-21T14:18:01.434702Z","last_seen":"2026-01-29T09:33:39.803134Z","times_seen":74,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"faceit.auth-vexarena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/play/v17/6ae84K2oVqwItm4TCpQy2knT.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/play/v17/6ae84K2oVqwItm4TCpQy2knT.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://faceit.auth-vexarena.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9160\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 24 Jan 2026 18:55:39 GMT\r\nexpires: Sun, 24 Jan 2027 18:55:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 398238\r\nlast-modified: Wed, 27 Apr 2022 15:54:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9160, version 1.0","md5":"2a30f2daa1c0fb4b9cbdf7f8fa85d7ae","sha1":"60f30edcb9d397c3523e24f72709b4e7f2cbc993","sha256":"23dac69f3ef7c5357c71c062e6ee5df4763154e0e36aa172e8b7683571f12bbf","sha512":"5d93e72bdc9ab39668f6628089d58fd5a3d89e71c08b2d808a4165629dea8515ff7a6a757ac8621cda636cedff5a677ccc8290a4023aee214986825f6dfd6e86","ssdeep":"192:CwtaucTKUnQ8GDuLEcL7VHLcnimCjoYEVdnwccKqy3t/fy4+:NTqdG6ZrufYgiccuZw","tlshash":"a312bf0926c17f92d78c0874030ab9ad4e94b7c7522d93907f81eb4a41043af9fa7f6a","first_seen":"2023-05-07T20:30:09Z","last_seen":"2026-05-02T02:43:33.942728Z","times_seen":83,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":76,"dns":1,"connect":7,"send":0,"wait":9,"receive":1,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/hX3NCxt.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /hX3NCxt.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Sep 2024 08:30:19 GMT\r\netag: \"92eec179c197717717e9cd80474d3141\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: ATL59-P13\r\nx-amz-cf-id: jiOfzkzBsNGsHljpMzUAMiFKDf8fHc_Het2ueOVHXWJ7jo4Jj6twkA==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 493811\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\nx-served-by: cache-iad-kjyo7100097-IAD, cache-hel1410025-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 178, 0\r\nx-timer: S1769679177.292013,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 15841\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15841,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 280x392, components 3","md5":"92eec179c197717717e9cd80474d3141","sha1":"14ae13226c462e002163a9e8e54334bc49a0c9cd","sha256":"6bc370603e6f8d9eafe047945a4ef0b6bff70c647b8aede6f0210061dc06404b","sha512":"8d807fb9b464fe33123cefa8845b3803c798cb4ca2088ee9bf1be1b06ad38e31a067c420e921bdea3c624d174a4ec63848b43140e93512b929a91fbd1d3473ef","ssdeep":"384:D0f7+DAZ7buZjUdE9vCPEKtJXcHUBpE50LEgyGCoqHl4ld:4Tbud39aN1/ESwdm","tlshash":"a962cf3ad6077998ff8ddd349084452aa4edb82ff837f30c1d7c645e2e90ae5a14c584","first_seen":"2025-05-25T22:18:04.353973Z","last_seen":"2026-01-29T09:33:39.804808Z","times_seen":75,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":97,"dns":29,"connect":14,"send":0,"wait":17,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/p1KxPcb.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /p1KxPcb.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 27 Jun 2024 04:44:20 GMT\r\netag: \"068bb9972247f0b0ae646d18e5dac5b9\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: ATL59-P13\r\nx-amz-cf-id: Z5-OcCfZHExf1LWUG1zpP_x8YphuxILrZBHgQqrN8Z4iizvX9ZPg2g==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 2557916\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\nx-served-by: cache-iad-kjyo7100109-IAD, cache-hel1410025-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 522, 0\r\nx-timer: S1769679177.318712,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 40587\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":40587,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 564x564, components 3","md5":"068bb9972247f0b0ae646d18e5dac5b9","sha1":"1b6c2e20858bffb0a6217c8624789236dea56a94","sha256":"6e43d27267f5f88a8f46a8e4a422b1a242acf6d8791667872197fe3d05ce53e4","sha512":"8be7c7213e694f975dd7943a4f488c414d15a7d199354f1aa77eb6d253c8c67e7020258593d18f3c862d75dd29ffa50fa1899932797f2a748e05825056097f7c","ssdeep":"768:USVx6W6r7BDyVILS1UmRHZQrqcDw7bLhDd1MWTIrzIcTzv:Uyj6rmIKd5H6w3LX1szIcn","tlshash":"3f03e139c541c3348fff617a19c42452994f6533886e986eaa6acdad70e0dacf3cc931","first_seen":"2025-04-20T18:21:26.200749Z","last_seen":"2026-02-09T13:54:03.537035Z","times_seen":77,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":31,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/W5Kh6Cs.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:59.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /W5Kh6Cs.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Thu, 27 Jun 2024 12:11:45 GMT\r\netag: \"cb642897cdeefe2a612ce0136c55d737\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: TfnAjywAB2h9uRd_GIFrYi3c7TNP2D8Af0enGIZDtCJBmCG9AopDAw==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 2585868\r\ndate: Thu, 29 Jan 2026 09:32:59 GMT\r\nx-served-by: cache-iad-kcgs7200038-IAD, cache-hel1410025-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 637, 0\r\nx-timer: S1769679179.111123,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 941\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":941,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"cb642897cdeefe2a612ce0136c55d737","sha1":"8172d3a9034f834eb463cc6699cd95a99a7923fe","sha256":"d6cdedfd0b260281172e4ad7af16111e80e7d752fd013ebef3d29bcf59d2af5f","sha512":"f0e96cabfe9aaa09e631f3e63fd29cfab049b94340f1f6472f72e4b16f13d85a3942bb5bcd7d25e549ea9a5a7d99aeb986e1ce701c7f3035f5dfa3a86c9e613f","ssdeep":"","tlshash":"d71188f22950597e96b4022ac27f4c414c23bbacb5d67d511128b015b15b062864b687","first_seen":"2025-04-20T18:21:26.199074Z","last_seen":"2026-02-09T13:54:03.600963Z","times_seen":77,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/cqSAhNU.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /cqSAhNU.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Sep 2024 08:31:17 GMT\r\netag: \"0bed564ed9af6d9f3baa250ecaa3f65b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: -vTFK_yFE5nQwxcd88Ei0FURUY7LbYotWJc2NPh00-b0p2q5Qk-qaQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 2555013\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\nx-served-by: cache-iad-kiad7000098-IAD, cache-hel1410025-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 1013, 0\r\nx-timer: S1769679177.292380,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 93399\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93399,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 736x736, components 3","md5":"0bed564ed9af6d9f3baa250ecaa3f65b","sha1":"2278ba12ae0a3b38d77da4373fd84b0a8cf8a197","sha256":"aac6c039b5b7018da20773f58fac266eeaf2f4f470ebcdd48d8ddc2285b3ea3b","sha512":"68126e868bc5dda0bf6871592d96e1eea81afe386154184705ca13eaf748ca4a8f296e3c36cd884c94cbb1272d18b3c798b8bb378b9558446f3325d2dc059201","ssdeep":"1536:vMny6DgkSRQwmrDxcYCfjNsJxn7CdmvEh/43m1YxBb6bFLFQDXftzkyUhs7G:EZDgGr7sNUVudmchqGHR5kXfhEhgG","tlshash":"9c9301a0d09bbd9718217bfed13f17c67e2e4a81894051a3d18301538ccfa2d7bf8a5a","first_seen":"2025-04-20T18:21:26.191892Z","last_seen":"2026-02-09T13:54:03.529665Z","times_seen":78,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":95,"dns":0,"connect":0,"send":0,"wait":45,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit.auth-vexarena.com/js/main.js","fqdn":"faceit.auth-vexarena.com","domain":"auth-vexarena.com","tld":"com"},"ip":{"addr":"87.249.38.179","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.auth-vexarena.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 14:03:00 GMT","end":"Tue, 28 Apr 2026 14:02:59 GMT"},"fingerprint":{"sha1":"AD:F4:98:59:8B:F7:54:22:DA:74:D9:94:93:43:80:8F:3E:2A:36:4C","sha256":"02:1F:46:D8:B9:6D:FE:28:4B:E2:C9:57:21:07:07:D4:C9:1C:82:A8:1F:6D:CF:21:68:9E:48:B8:86:B0:0D:91"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: faceit.auth-vexarena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.3\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 22 Oct 2025 04:02:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f85742-7ec\"\r\nexpires: Fri, 29 Jan 2027 09:32:57 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2028,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"6d3ed7ec913c591592e14c9da558c872","sha1":"9d23caeacb76c155733bddeedc700456a0987fe5","sha256":"4587f9952bb1537028a88b38362351476a87b4a12824c7fbd10ba41317ab23a8","sha512":"a0ea0bb3524b469b7f455439c754f2b5dd8aa2bd910fff9ccaab2eb6d0daea3e7684874818a28b3a9b92a393c68a03c61893c88a59140cffb1064bb93ad44016","ssdeep":"","tlshash":"c741ef29a2b83432057b13ae62db8a99773000477641cd2d3f6c8b4e0fc5eb599e18de","first_seen":"2025-10-22T17:12:12.47275Z","last_seen":"2026-01-29T09:33:39.808104Z","times_seen":65,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"faceit.auth-vexarena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/bi2Hyem.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /bi2Hyem.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 27 Jun 2024 04:40:08 GMT\r\netag: \"9b3a4eb6b0270edd1bd6d20f63e7ba9e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: pQbYwdB_lpaYzJpLRddIH0DQoCCeKaxy1g_nq-DyNK0RDS0Z8OES_g==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1888507\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\nx-served-by: cache-iad-kiad7000047-IAD, cache-hel1410025-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 346, 0\r\nx-timer: S1769679177.292972,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 18248\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":18248,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 544x544, components 3","md5":"9b3a4eb6b0270edd1bd6d20f63e7ba9e","sha1":"11dfbd612ad26d34c39a811739e6cfb944e7c2a1","sha256":"a99a58673d85656a799976f13440260ecd020490918f5dc28d34bc873a212246","sha512":"e1754d3d96f923473b1e9c6337a192c382017d1d9e2e83f2e243fbe954b72e44b2be0c434e140bd7d05ebe88f9aaee0c75de88fa76e69410c5c2caa18cce962d","ssdeep":"384:DKozmru6b8oFs34c+EUkgQuc/RqTFWVPqjs7+YB/Cb6Edjznt6uZ4+4rQIZ:uozcuRog6UgQPUQcWq+EdMu+9Z","tlshash":"9982e1a7c5431141fc432df027f2a5e77f79cdb8c22d15a19146bc908242522ae6bf36","first_seen":"2025-04-20T18:21:26.193507Z","last_seen":"2026-02-09T13:54:03.496065Z","times_seen":78,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":56,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/play/v17/6aez4K2oVqwIvtU2Hw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/play/v17/6aez4K2oVqwIvtU2Hw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://faceit.auth-vexarena.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17164\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:21:01 GMT\r\nexpires: Sat, 23 Jan 2027 13:21:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Apr 2022 16:06:40 GMT\r\ncontent-type: font/woff2\r\nage: 504716\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17164,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17164, version 1.0","md5":"c76806d1f447336b530232d9a7ecaa10","sha1":"72f3c5f813c34a85df23c05a79e5125cd6096260","sha256":"6cdceb438e41ee07d58b7214785e14651205d8cc4b158a9a3ab988515f66c1cc","sha512":"220585c5f43f43a2248d5ec2611727b9caa07eac10510367e20f4037f61b504dfa8ccac38980da7242117bc60b421f403e73823e3faca9d0d8c01f24b4bbfb5e","ssdeep":"384:KWMgjUdBzu7pMXIT5X64srdX10Jou1rhbITCzR85YJY0Bz:K3dNu7y4lsQou1WTCzRoYJZJ","tlshash":"7872e27e9b496ff25092d483136fa545ea0c1682be9b6aacdc767dc5c3c01ec2f61800","first_seen":"2023-05-01T19:39:13Z","last_seen":"2026-06-04T00:01:57.985971Z","times_seen":143,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":59,"dns":1,"connect":7,"send":0,"wait":11,"receive":2,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gyazo.com/1c40d14958d8e36df14f2b6ffebdb44c.png","fqdn":"i.gyazo.com","domain":"gyazo.com","tld":"com"},"ip":{"addr":"104.18.25.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gyazo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 21:46:49 GMT","end":"Sun, 12 Apr 2026 22:46:48 GMT"},"fingerprint":{"sha1":"CC:95:CB:65:A2:31:CE:44:C8:7B:A0:4A:D4:CF:1B:66:12:09:51:31","sha256":"F4:6A:17:4C:10:D9:40:CA:C5:71:34:12:27:39:7A:06:BA:C6:89:96:EE:64:4C:40:79:CC:5D:06:9D:08:EA:E1"}}},"request":{"raw":"GET /1c40d14958d8e36df14f2b6ffebdb44c.png HTTP/1.1\r\nHost: i.gyazo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 56971\r\nserver: cloudflare\r\ncf-ray: 9c57b9a9cdc656a8-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: https://gyazo.com\r\nage: 1020105\r\ncache-control: public, max-age=31536000\r\netag: \"1c40\"\r\nexpires: Fri, 29 Jan 2027 09:32:57 GMT\r\nset-cookie: Gyazo_cfwoker=i; Secure; HttpOnly; SameSite=None; Expires=Tue, 01 Jan 2030 00:00:00 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 google\r\naccess-control-allow-credentials: true\r\nx-cache-level: ZS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56971,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 380 x 430, 8-bit/color RGBA, non-interlaced","md5":"1c40d14958d8e36df14f2b6ffebdb44c","sha1":"0e141b9c8f47bee680dc873fe4ebcddb399a5dad","sha256":"ff338fbb8fd23ad3612bdd913f49982d30b9bd0056eb2fec58d0c3c9c6a61319","sha512":"b56a5b6729d921157963dc00627147be340a5af086841b67ced9968ae8fed4f59dfe735643a448529623443a813b4b3298778a89fdeb17235984bbe77d102109","ssdeep":"1536:pzHPgUmWFKWHspEAS6vRFZ44nSkBoU/IHy37pj9ZWCU1BK:pzHPpHub5FZK41/j7pj9DcK","tlshash":"c143f19d264a04de54f0f3a4033ab8502affb82757bc98778873522985849b2bb13d9d","first_seen":"2025-10-19T01:28:58.346438Z","last_seen":"2026-01-29T09:33:39.810701Z","times_seen":68,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":60,"dns":20,"connect":7,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/Dz3gJWT.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /Dz3gJWT.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Mon, 11 Nov 2024 18:18:40 GMT\r\netag: \"8c765dc17b57e1ffe915bcf8c48217d1\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD12-P2\r\nx-amz-cf-id: TmIGLv4sZHwPKgnfXVSPbQ9kM7xavI1-DiqMrEkEeFFpHK9jMVYKDA==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 692212\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\nx-served-by: cache-iad-kcgs7200135-IAD, cache-hel1410025-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 345, 0\r\nx-timer: S1769679177.313852,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 1026487\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1026487,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 1280, 8-bit/color RGB, non-interlaced","md5":"8c765dc17b57e1ffe915bcf8c48217d1","sha1":"eeb12be295931d0316d979234384340500402760","sha256":"4618e0ad473b9acc006b9319dbd34a0f8d559715c64c02a5f8c9b257df61cca9","sha512":"d2bf297de647f2022f4f7ad86749666aa512cc0ae1eacf485d63605e9ddbc1ed25e10a6e86fe5cd5757083cb401f22e092f85ad53f5eea8d6a5dc190afb6a883","ssdeep":"24576:3bjmhMVm5NXPD5mFA6y1sOjxL+I8TgHA60w5z9i:3/i5dP9mu6heIIPH0ui","tlshash":"6c253307a40b78b2ba4b6f4cf5433871b792b5c5da478ae4ec267f818983194073f792","first_seen":"2025-05-25T22:18:04.390806Z","last_seen":"2026-01-29T09:33:39.811538Z","times_seen":76,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":35,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"distribution.faceit-cdn.net/images/981a0424-4c3c-469e-a2cf-1be7b11efb52.jpeg","fqdn":"distribution.faceit-cdn.net","domain":"faceit-cdn.net","tld":"net"},"ip":{"addr":"193.41.200.102","port":443,"asn":0,"as":"","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit-cdn.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 08:04:50 GMT","end":"Fri, 27 Mar 2026 09:04:42 GMT"},"fingerprint":{"sha1":"F3:EF:05:E3:D3:BD:5A:32:DF:A1:9E:E2:F3:A3:92:80:CF:CA:55:C5","sha256":"13:EB:F9:59:70:0F:D9:E5:08:7A:60:0E:BA:75:2C:65:30:23:03:6B:1E:96:DE:F5:D3:47:24:46:E8:7E:5F:FF"}}},"request":{"raw":"GET /images/981a0424-4c3c-469e-a2cf-1be7b11efb52.jpeg HTTP/1.1\r\nHost: distribution.faceit-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 125704\r\ncache-control: public, max-age=31556926, s-maxage=31556926\r\nexpires: Mon, 28 Dec 2026 19:08:09 GMT\r\nfaceit-env: prod\r\nfaceit-service: imaginary-api\r\nfaceit-version: 1.9.0\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 20\r\nx-envoy-decorator-operation: imaginary-api.team-blue.svc.cluster.local:80/*\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=5;i,cf-chb=(651;u=5;i)\r\ncf-polished: ok\r\ncf-bgj: csam-hash,h2pri\r\naccept-ranges: bytes\r\nlast-modified: Sun, 28 Dec 2025 13:19:23 GMT\r\nset-cookie: __cf_bm=P86muPS3SAQRr9OWte3OK3Op0lpZ8By_CuslnJtYNao-1769679177.2245507-1.0.1.1-ziM0EB0oiQwW1WOwY5XqokmZK2xdC7rqO1nQaRy6cr3gJFGLwWGK7ihzpcXFUDwSNLRPzUGC55QITOu36eQI_zu_qiQbi_pJtZX3gE29.ll69F0wuMjvl5VchK02TRDR; HttpOnly; Secure; Path=/; Domain=faceit-cdn.net; Expires=Thu, 29 Jan 2026 10:02:57 GMT\r\nage: 2751213\r\ncf-cache-status: HIT\r\ncf-ray: 9c57b9a9aefe0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125704,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x1200, components 3","md5":"bf244f17c238ede008eca8675b9e64ba","sha1":"33656e5e75aabac2c44700558210b5352cbf05f0","sha256":"bf75bc4d61f6f7971aa0bd6049d6fb15c2a81a1d1a064d34f4ead01c4e36cf4f","sha512":"7f1061e08eb0f3838c107538153fc3bf26d5ac2ecf128fe0f7a54b2a2b2f9d8d759ca6aca0a3e80d39af9d8af364d12263f74f24138f7bed557339aa25aebadb","ssdeep":"3072:ng8VCdP0F/8xUCA40+I/GuEywNZXFGBPbSA:g8VGm/6A40+cW9Z1kjJ","tlshash":"55c302ba7771e703d28ee771d76e01d1be061e1e3184167ee0852c2a2aeedd96c5084d","first_seen":"2025-12-20T13:49:53.499289Z","last_seen":"2026-01-29T09:33:39.812347Z","times_seen":48,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":38,"dns":20,"connect":1,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/7QT4HUz.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /7QT4HUz.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 27 Jun 2024 04:43:00 GMT\r\netag: \"e80fcff87d4b51fd57f89d444d340bc9\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: yWy3H6OhHuI5haXWAkkn9dgXyLx6REXfoZy4d2V-yVQOU8vtfmcMLQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1475733\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\nx-served-by: cache-iad-kiad7000130-IAD, cache-hel1410025-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 164, 0\r\nx-timer: S1769679177.313724,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 64705\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64705,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 564x564, components 3","md5":"e80fcff87d4b51fd57f89d444d340bc9","sha1":"837b8ea9ede9fe71a1312cc1de4bd73eb3d759a4","sha256":"7a47cbbe2bff6517b73a8fb01c42b0afc2279beaf0c90c26e1acc5f2fe8856cb","sha512":"dadbd8cb29d5f1e4a19a6ef504d4af3d29801b06b7e0c9e34585e2d181e006feb72d0dc3efc460760b2e72fc136dbf21427d73d10aec3a36d92a399a9618b711","ssdeep":"1536:DxriPjjbcH2Ordqwk3Syst8eAzdb2xgLmm:R6j3EkRSys+XTt","tlshash":"c85302c3b496d04a834fb974d3cb0e7fee40a96adc7d576d846b42ca04e7302988593a","first_seen":"2025-05-25T22:18:04.382269Z","last_seen":"2026-02-09T13:54:03.522822Z","times_seen":77,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":35,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/1glDhNI.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /1glDhNI.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Thu, 27 Jun 2024 04:23:36 GMT\r\netag: \"af72616e9675734a66549f36725c13f8\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: 46yCHDUALwotpgJxc4AZTJ0tytI5C-Hib8cUjlpcbrDZOxzEAtnXWg==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1794779\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\nx-served-by: cache-iad-kcgs7200079-IAD, cache-hel1410025-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 377, 0\r\nx-timer: S1769679177.304488,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 7372\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7372,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 768 x 130, 8-bit/color RGBA, non-interlaced","md5":"af72616e9675734a66549f36725c13f8","sha1":"f1143563d7396c15dbce2e2f4e011ef82253a27d","sha256":"71eb4b771b6dafdf57c5a826a391de230352dc5898b196561b32cf33a1c67095","sha512":"c320fe01622b245f8772b28ea65ab0632d46f5b1045019cee8bf236275e6f26df6fb58f0f41a749f0cba87c42ae385a2f5ee569ed2a7dea85b5d51e8ce954fa1","ssdeep":"192:qsx0Y7s/42ELaY4kgTtiIUB8aoWEUQXxpR2TNkH30Pah:qsxD443LaYRSTHBpcyEP4","tlshash":"e7e19e051176c62cce8d48121c7abf6a00be0f028d019e379bdf2ee63aa05d6576475c","first_seen":"2025-05-25T22:18:04.352889Z","last_seen":"2026-02-09T13:54:03.606542Z","times_seen":77,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":56,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/zlK7EZW.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /zlK7EZW.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Sep 2024 08:30:39 GMT\r\netag: \"e3f9d6ef0a3c06d106a035c8e5e5bb3c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: bZP8D65fTRnNGhnhS3_zw2qvDEhRfum0f_1lq_MCZ_0UYkdqt1YLeg==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 2136497\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\nx-served-by: cache-iad-kjyo7100038-IAD, cache-hel1410025-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 703, 0\r\nx-timer: S1769679177.292120,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 29842\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":29842,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 564x564, components 3","md5":"e3f9d6ef0a3c06d106a035c8e5e5bb3c","sha1":"ed94cc66d1520fe4693bc8d3e540440c2b5da8e2","sha256":"0a6759e0f95999684069d556d7e70bee39390c615fb3051fad0354687b6bd0ac","sha512":"4435bc3619d6cfa4a0ff09730e3cead3d81e2186c0b86d87adbd996b847363930b135c6f49669fb50bf714f8d2d9a8c0413872a8e7877a2fb47516b301a71888","ssdeep":"768:zWyot0SkM7bdfeN2LlDcOvFQUytEm7W5rScYaD5pV:Et0Ix5dtHyP787YeD","tlshash":"3bd2e1e7d91da2e54f18893318deb1513493f9a44c96ab067609089fc35c1be4b37e53","first_seen":"2025-04-20T18:21:26.182102Z","last_seen":"2026-01-29T09:33:39.814809Z","times_seen":76,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/play/v17/6ae84K2oVqwItm4TCpAy2g.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/play/v17/6ae84K2oVqwItm4TCpAy2g.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://faceit.auth-vexarena.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17216\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 27 Jan 2026 06:27:01 GMT\r\nexpires: Wed, 27 Jan 2027 06:27:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 183956\r\nlast-modified: Wed, 27 Apr 2022 15:54:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17216,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17216, version 1.0","md5":"136a643fb4e5f2ff8e2ee7bf990dc36b","sha1":"049d9ab9dea3429bde3c5a1a401666ab766c4689","sha256":"669ad8e27574eb5e9fcf9af7c0e103081d7e5be1ac28cd7c3d110591a8dfab88","sha512":"5851d525c899ed1e954e55fd4a4d76c09838bbc45c2d3c780b19e08f24d636a0d10c42e3fceb7b84bf165b0bc0090d2341271adaf5d244e7dab6d0662d473bb2","ssdeep":"384:9hswiU3pfuIOVxKBTzZv87c/H5VrWVpGM7NXSjhhv:9KopuL/G/HCGEXghF","tlshash":"9d72e10389d2ce78c43c9a340ace9282d9baf8b5711c860438067710c2c6b7d76cdde9","first_seen":"2023-05-01T22:33:55Z","last_seen":"2026-06-04T00:01:57.923809Z","times_seen":119,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":122,"dns":0,"connect":9,"send":0,"wait":13,"receive":2,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit.auth-vexarena.com/","fqdn":"faceit.auth-vexarena.com","domain":"auth-vexarena.com","tld":"com"},"ip":{"addr":"87.249.38.179","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-29T09:32:56.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.auth-vexarena.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 14:03:00 GMT","end":"Tue, 28 Apr 2026 14:02:59 GMT"},"fingerprint":{"sha1":"AD:F4:98:59:8B:F7:54:22:DA:74:D9:94:93:43:80:8F:3E:2A:36:4C","sha256":"02:1F:46:D8:B9:6D:FE:28:4B:E2:C9:57:21:07:07:D4:C9:1C:82:A8:1F:6D:CF:21:68:9E:48:B8:86:B0:0D:91"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: faceit.auth-vexarena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.3\r\ndate: Thu, 29 Jan 2026 09:32:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 22 Oct 2025 04:02:52 GMT\r\netag: W/\"9c71-641b763f3b300\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery UI:1.13.1","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}],"data":{"size":40049,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (554), with CRLF line terminators","md5":"43602f209486157cf8aeef3257a5f7c1","sha1":"b2fbb16dbcebfd0fdc1c39268ece2e56b61ba555","sha256":"62da9c931147999e26af4fbda458be8018ba867677876ef8cd76356dfe97f1e1","sha512":"940bb57b27045d43e426dbb373cfe9c021ff004ce976dc38408c591d5e996333991c1fdfc4c368bbea1049b507cbb224a5696bda47c1c776753a1bcfe49930ff","ssdeep":"384:suCvaEakPC6EVLQxRYyiG6FiGq6rC7Sc2GBsoe9a:suCvazkfE6xydG6Fif6rCuc0a","tlshash":"ac03f92295c604224633d2e6af636799ffa64057d30142487afe931a2ff5d81e663fcc","first_seen":"2025-10-22T17:12:12.505125Z","last_seen":"2026-01-29T09:33:39.816459Z","times_seen":65,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":102,"dns":14,"connect":39,"send":0,"wait":77,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"faceit.auth-vexarena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/ZdRVHq5.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /ZdRVHq5.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Sep 2024 08:30:57 GMT\r\netag: \"b00ee16ff5dfcaf64ee7874c3b02a279\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: LkdQJSDQOTAyS4dB31c4G4JOczPuvhjS1mwz-auCMlg9J8E086YHlg==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 721789\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\nx-served-by: cache-iad-kiad7000121-IAD, cache-hel1410025-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 9, 0\r\nx-timer: S1769679177.292401,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 31492\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":31492,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 564x564, components 3","md5":"b00ee16ff5dfcaf64ee7874c3b02a279","sha1":"b02eea490bc5ff1c3d41bba621de9c22bd0fb2a8","sha256":"0e9fe5da8ebc88e25caff1572dab782bb2284a104618726694a9d23d70f6a36b","sha512":"72fec23b070ea508a442dd7bec497ddeb1c54a27a0b1799437e10b5a6acf3fd8701693670fd716bfc7333513e929db66e739b985936dd63a515bf6177e54a6ff","ssdeep":"768:Fqm3UcKlA7mg1T10LXi9Z6yIj3LYrNf0twtO:X/vsLS76yIj8r2GE","tlshash":"70e2e197fbaf1017d1494ef7112930692ee7a285def6e8f5f028e3061b74e4e05a6304","first_seen":"2025-04-20T18:21:26.192701Z","last_seen":"2026-02-09T13:54:03.552373Z","times_seen":78,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":95,"dns":0,"connect":0,"send":0,"wait":25,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://faceit.auth-vexarena.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-45a82\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\nage: 3195332\r\nx-served-by: cache-lga21929-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 14, 22805\r\nx-timer: S1769679177.277324,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 83619\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":285314,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"12e87d2f3a4c8b347ab13a0764d420a3","sha1":"4be715e11048c057fdf2ee0fbbfad4dbf3504c55","sha256":"78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe","sha512":"fa4d699e582de05d47f0beeddf3f79a37fca3bea3bf083447174db9e8250fc5d95a835615a86a256697f3841eff47b1583151a556f886e264f50941f17f63167","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPfz:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAV","tlshash":"e954a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","first_seen":"2023-09-15T16:51:13Z","last_seen":"2026-06-08T18:51:25.225064Z","times_seen":17372,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":14,"receive":21,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit.auth-vexarena.com/assets/css/styleNew.css","fqdn":"faceit.auth-vexarena.com","domain":"auth-vexarena.com","tld":"com"},"ip":{"addr":"87.249.38.179","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.auth-vexarena.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 14:03:00 GMT","end":"Tue, 28 Apr 2026 14:02:59 GMT"},"fingerprint":{"sha1":"AD:F4:98:59:8B:F7:54:22:DA:74:D9:94:93:43:80:8F:3E:2A:36:4C","sha256":"02:1F:46:D8:B9:6D:FE:28:4B:E2:C9:57:21:07:07:D4:C9:1C:82:A8:1F:6D:CF:21:68:9E:48:B8:86:B0:0D:91"}}},"request":{"raw":"GET /assets/css/styleNew.css HTTP/1.1\r\nHost: faceit.auth-vexarena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.3\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 17 May 2025 18:56:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6828dbe4-4666\"\r\nexpires: Fri, 29 Jan 2027 09:32:57 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18022,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d91c7b3b208c60e7664590a122019882","sha1":"7a7f12bea640b9e87b4abf331aa084572c4c44f6","sha256":"174c3d55d006096bb551ab276590cf58704598b0230c01b15004dab3b0a18bf6","sha512":"60a491d056bf059402fe6799c05d9ab9be377e2cd6e5cf165bf34b15bbb47c4e61b7b71d4aa12fb064d4a4f5920a52c5453a6353cc0f76c462fa8f3198787f73","ssdeep":"192:87XIlHSyoN31DF9OpOna1+dpDUeDLOqlxqqhDEcIfo249lY4fE8k42NLxlJr4LOW:874l/oDxp2QkyBWh0wEj","tlshash":"e782839985061045b2338db96bf21b29da9d40638a02427c7ff936c98ffa57853b1fcd","first_seen":"2025-05-25T22:18:04.359908Z","last_seen":"2026-02-09T13:54:03.527694Z","times_seen":77,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"faceit.auth-vexarena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/vCqsqju.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /vCqsqju.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Thu, 27 Jun 2024 04:32:28 GMT\r\netag: \"806e2b5008dc49798f912deacd93c331\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: 4Ptq2Y1di_Zr1DzI3hbywGADoxAbfWqd8IgkXOSIpL7hppwWUNkw3g==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 2582883\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\nx-served-by: cache-iad-kiad7000070-IAD, cache-hel1410025-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 571, 0\r\nx-timer: S1769679177.293155,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 3132\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3132,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 123 x 123, 8-bit/color RGB, non-interlaced","md5":"806e2b5008dc49798f912deacd93c331","sha1":"d679c2896feeae624268c3b3b07f5cf237011a0a","sha256":"e0243730f2acd29e8114d47ae0af9fa2c8d4723b29556a162033f56f65b8a2cc","sha512":"ddcae31aa2f5e121bc0d02e9181968bc2f43a60156c685d4e68b1fb55486fb372f5601152fe379d0959f6f8791200b100baeeb0628d9518ec1d5f89c6c2d3534","ssdeep":"","tlshash":"b1514b2a71c01704a58c7b39d6a1f8627329813740cfc10f65de8561c8cbb67eaadc9f","first_seen":"2025-04-20T18:21:26.180664Z","last_seen":"2026-02-09T13:54:03.590451Z","times_seen":78,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":56,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/TVJlwQJ.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /TVJlwQJ.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 27 Jun 2024 04:43:23 GMT\r\netag: \"928bda9d64f35a6b691fce7cce03d7ca\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: laDqzQZ2H2y_CxDsiUX2JqNneyn3VMUEq8beoyFMuA_mQW7kI7kSWA==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 521615\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\nx-served-by: cache-iad-kjyo7100113-IAD, cache-hel1410025-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 4, 0\r\nx-timer: S1769679177.304417,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 33704\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":33704,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 563x563, components 3","md5":"928bda9d64f35a6b691fce7cce03d7ca","sha1":"aeafaaa7c14725ca399ffa593e3e4a8a5afbb730","sha256":"82b23bf856be1fee7bca8dd90386c2893ccaebf0d22f65d8a7e134cb4960cb25","sha512":"a58cc458ac5cbc4873393c29194454a31b34528b576e6f55bcce4515bbd633dc6d46bdae94637f09ddd7a0d3f00a742eb3cf6186f662b01edc2287fc82bfa90d","ssdeep":"768:iXKX6OSKjdznQx/RYw2JIO2oJdcSR5VAkGsoKSi9LNv1UKPY8Iq+yR:WKX9SKjdKUIOViSrVADZ9Yxum","tlshash":"c4e2e1aceb764e0a942407fe84d8500fb57069efb9d04746aebd044294b7be451bb07b","first_seen":"2025-05-25T22:18:04.351686Z","last_seen":"2026-02-09T13:54:03.531671Z","times_seen":77,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":48,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.iconfinder.com/data/icons/smallicons-controls/32/614369-cloud_error-512.png","fqdn":"cdn1.iconfinder.com","domain":"iconfinder.com","tld":"com"},"ip":{"addr":"104.20.38.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconfinder.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 21:20:48 GMT","end":"Thu, 09 Apr 2026 22:18:23 GMT"},"fingerprint":{"sha1":"90:76:53:AA:D7:20:9E:F4:3D:3D:89:52:6F:D2:BF:AD:41:BF:13:9C","sha256":"28:0D:C8:F9:9D:71:60:CA:44:DF:D0:29:54:42:B2:0A:68:8F:2E:F8:E4:4E:95:DB:63:73:7E:C0:65:25:3F:7A"}}},"request":{"raw":"GET /data/icons/smallicons-controls/32/614369-cloud_error-512.png HTTP/1.1\r\nHost: cdn1.iconfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 13712\r\ncf-ray: 9c57b9ab484c56ca-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"614369.png\"\r\ncontent-security-policy: script-src 'none'\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=8u4kZGiEsPpMeNwfILPddCT%2BhZzDWRVjAWPKBYgCz8w%3D\\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\\u0026ts=1767726440\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=8u4kZGiEsPpMeNwfILPddCT%2BhZzDWRVjAWPKBYgCz8w%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767726440\"\r\nvia: 2.0 heroku-router\r\nx-request-id: 189bf9cc-13a3-bdc5-2c9e-3c6fba452e37\r\naccept-ranges: bytes\r\nlast-modified: Tue, 06 Jan 2026 19:07:20 GMT\r\nage: 1952736\r\nexpires: Fri, 29 Jan 2027 09:32:57 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1187\u0026min_rtt=502\u0026rtt_var=1401\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3209\u0026recv_bytes=1235\u0026delivery_rate=7180165\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=812f180deed769ec\u0026ts=34\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"2c2550b1a80e276fce2a81a84cd6db2c","sha1":"9d74750c01a069d6498d7e94a6eafe3952fafc09","sha256":"d2e01e5a2cbf63910027be2dd80b21bdfdfc74f6e9a2bae7014ce4b42581ac63","sha512":"3bd979a9578175cb89b489614f9ba6e6e538a1e0db2401309b1d9df3c7342d14d28b93f07a02505377ea8a27543a359786dd027ad80a3b3cf7c1e12036f4ad74","ssdeep":"384:S812uo24+SfgaCzw8nFYvvYWkN/xzHy/XIAKCEg:523Fvfga2/FYvvY7HUXIAhEg","tlshash":"e352bf7e26ba4a9af462b53e48b90b553afccc6447f716046ff907ac44caa11d800795","first_seen":"2025-09-21T14:18:01.396367Z","last_seen":"2026-01-29T09:33:39.825105Z","times_seen":73,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":272,"dns":0,"connect":1,"send":0,"wait":21,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jqueryui/1.13.2/themes/base/jquery-ui.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faceit.auth-vexarena.com/","date":"2026-01-29T09:32:57.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/jqueryui/1.13.2/themes/base/jquery-ui.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.auth-vexarena.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 29 Jan 2026 09:32:57 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 6453\r\ncf-ray: 9c57b9a97afb568d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62e445d5-1935\"\r\nlast-modified: Fri, 29 Jul 2022 20:40:53 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 3480983\r\nexpires: Tue, 19 Jan 2027 09:32:57 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FqzIgnOyr%2B5Y0rduDlGiDSO2ddTGHbOvx5FFyxHjMeGLY4bcm71YNKzuos2Z%2BobweKF4xMBeHDmd%2B%2F3JdjuJyDql1balVuft9ntmOdRPs%2Bla%2Fpu7Urdazanu4PqtGvpb6RSMbDFS\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30778,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (29189)","md5":"938109d2b5f9778c8d9eec5884ed0a64","sha1":"7f6c4397d33a9a268d80e26b9336c7d6a35c99ab","sha256":"54dc71796bfbf1f069559ddc33c2e8992efec541f621797a849d442a69822696","sha512":"10b57ec728bc221100a4f4bfa528faebe262c3eb0e4f532a933961f04c578a17b8cdfa9b5a4c4f462f30a6d5c83bd83bdc54a5866aae16550eb8c4a85f3e4847","ssdeep":"384:kM9cR8lOXHc11exBMzymUz8YC6G/zDMSc7nfZBhVrQ:kDXHceBMznUvC6G/zDMBha","tlshash":"08d24130a4c2253dfe33d23061e11ef4523bc242eda25fbda09ab65953e98e4c57b971","first_seen":"2023-04-18T18:43:56Z","last_seen":"2026-06-07T23:49:31.452919Z","times_seen":1211,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":16,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
