{"report_id":"eb4f5fcd-fbf1-426d-a48d-0fc7233470c8","version":0,"status":"done","tags":[],"date":"2026-09-04T02:19:49Z","url":{"schema":"https","addr":"faceit.accsyncing.com/verification/step-2/","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/step-2/","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"title":"GO VERIFY YOURSELF","dom":{"size":91043,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (743)","md5":"793f7d2b1c09e9217af7273dc2922f17","sha1":"a7f9d53241a1f85941a6090a4d651a2163a19147","sha256":"bb2dee676d6d6207b3716805f46b601b4066efe38994ac4d8e074372ee28453a","sha512":"b0fadfc2bae1492be1db0dcebf2a8e4f970754279de1b2aa1ce1a684da8dab5b92cf97078f3e44300fd4ff89433f7205a73f396890f96ee882747fa5f06d6bd8","ssdeep":"1536:tRCzMusG9rkczEXs6smtTklE+9sVjYOxG:9GDmC5OxG","tlshash":"ac93c762a9f300a3019380a36f67776a3e7780179306cd5476bd57986fcaf56c9a32cc","dom_hash":"domhash0909e4858c7bb1ca0e65eb35241cac8e","first_seen":"2026-09-04T02:19:56.93507Z","last_seen":"2026-09-04T02:19:56.93507Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/step-2/","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T02:19:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"faceit.accsyncing.com","ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-07-31","domain_rank":0,"first_seen":"2026-08-02T21:20:09.323144Z","last_seen":"2026-08-02T21:20:09.323145Z","alert_count":54,"request_count":54,"received_data":4698270,"sent_data":29380,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery UI:1.13.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/step-2/","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4502fe487991606e2bd98654825c3c27","sha1":"f3e737faaca78669ef5f193b6b830040dddcd3aa","sha256":"7a6db470add87933007fb4f9f43e2bfcab5c45f25f3b806765a968e3bf549d02","sha512":"1b0db49b507ea358134b200cb94136d842fd9d0b6c0f71220031613f984f4eb54772bb07206c13c91513176db6b96c44cd900c4c542ee87d8ab320e25b67173d","ssdeep":"","tlshash":"5fd05e700161247a00fb8687df8b6f81754a058b90ca50513d2c8d0bbfc06f3d9602d1","size":236,"data":"","first_seen":"2026-07-30T15:06:02.953238Z","last_seen":"2026-09-04T02:19:57.006432Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/step-2/","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"44f06f4862d6d537561e9e3fef22030c","sha1":"9c720659e6b7612e3fbcbaa25a96dcac8293cd9f","sha256":"416e7dec10428bd421fd6c23a19a7fa92ee8d6d77d5ee7a42dd8735f144523f9","sha512":"abe1e5dba13aadb7f163dd34465b5b2e6835936497572de2f946f5de6a06b51d6b8b0572dceed20c9d259d402b546cf402ee1a8feba6da636877e82024783a89","ssdeep":"","tlshash":"8cd02e38c716983b823682dbb2866feda071030e2600c68294600a492dc2c2a8ee08f2","size":242,"data":"","first_seen":"2026-07-30T15:06:02.954525Z","last_seen":"2026-09-04T02:19:57.007785Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/step-2/","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d33fca17a70627b2fd3b221a428307c7","sha1":"c8a500a21a6322cfc3e1cdec1d9e787bd7dd7d8b","sha256":"7d701c145634eb8aee9394c324f298ae0e1bbf6a447ce65e561690db4d4e0abe","sha512":"3e9df06cb8b8d39edd52562807472f76fbbc634a38147019dbc8e02bb3f6c940dfd637885edd5d63c1522e31f8ce12b9b9433c0f77aea1b9627f00845ab0acf6","ssdeep":"","tlshash":"13014e394b3a097a0367c0d39bde17c9b43201cf5904824a797c854d1fd8c9576b75ee","size":810,"data":"","first_seen":"2026-09-04T02:19:57.009155Z","last_seen":"2026-09-04T02:19:57.009155Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/step-2/","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a3ca73e16e19d322f07e7c173ff1597","sha1":"74c0fd504094f3b212b531f6f8687bb31c3166ea","sha256":"e02e49f5e2cd4dd693ebf40caeff2750a4a965a1094e17ef07dc618e15d2cf3d","sha512":"7d958669437443fd7669038082a386a766663c3e53a6bd37e9f2717fe54d88170b3f1dff6102b7f16498b3f78f15a9d3fde8215c8618a96c0e5c5eba6a43fec9","ssdeep":"384:bs6smDvhxIa2ffOkyfUXvpj85hl5m1a5uL5SOOgpwwEBllovU69scvpjO5hz5m1C:bs6smtiOklBCG/MOOYYX+9s8o8BiHv","tlshash":"a513e7b151b700e646539223cb17520a3a33a12f7306ce9673bf47a86fc8d6586b77d8","size":41505,"data":"","first_seen":"2026-09-04T02:19:57.01029Z","last_seen":"2026-09-04T02:19:57.01029Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/step-2/","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7655a6e0f35ec9944a907bf1479a7d4d","sha1":"f92d27b3d1ee67550b4e13f630c923c27096d2d9","sha256":"64d84f8bc0638c6f30ebfe0e11027b6cd7235eaf9a5f017d3287c4d2a621b781","sha512":"c22dd506c35e198cd7f9c877eaece566e0046f58f9a6f1464c2870e55ad06e9c911f0cc22b67a627cd83a43ad0089b8c2255cd5184f0db8e672b8c40310c3908","ssdeep":"","tlshash":"8b0147201632497502b381d773dfebc5782900cba840849a357cce0c2f46cd1a2f50ea","size":692,"data":"","first_seen":"2026-09-04T02:19:57.011699Z","last_seen":"2026-09-04T02:19:57.011699Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/step-2/","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6eadb3df316f46e77809dbe17728a15a","sha1":"e29fd93fc3679be1ddb6232e39d7280873542048","sha256":"ebdd6a29f20b45820ad0468997db58e2ba30b9d9db598afa7a91339f2d83845e","sha512":"f356d0826afc84a66ee8be8099af9d38ecce2bf7c7402bba9948224807b1aa9d0cc0ca7bfc4336c6b693aec67a68603849d27ab089b81936d5b38e39d2fe5e43","ssdeep":"48:UTQ+yGdQkmdZ46XP6vJ0S8Rk8R7vKSQ7zurXojoroEkz+aBVMnugM6I6VL6M6SLJ:WyGdlmdZhSqvX94eGm5HyYVxKSbL","tlshash":"cbb17599f1f2172d887f68932efba5c5621804d7d005ca547f9c25c49f80617f4b27e8","size":5474,"data":"","first_seen":"2026-09-04T02:19:57.012986Z","last_seen":"2026-09-04T02:19:57.012986Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/step-2/","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4423b265e34c9bc88d6c4df10de3279f","sha1":"92fe8d32730122fdefefce7ccd2e85f8e1bbebca","sha256":"61a389709cfd9fe68b68c13b2886a188f953ffb18e046df5c0ecc6d945db6690","sha512":"3d25b00925a1064d1ada8a0801a1816d69b965fea0232a9ca68de72bb87177f6c9a854304071b211209bb4520239c3da3bc14da9d3e3735a9b2f04a4fe626d6f","ssdeep":"","tlshash":"1001cbca806667bf122bc3670f2b1a042238006f4392c8723abc80996f8037143e76c8","size":822,"data":"","first_seen":"2026-09-04T02:19:57.024681Z","last_seen":"2026-09-04T02:19:57.024681Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/step-2/","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2207169067f64b49c27c85b36684957e","sha1":"7d83639c08581410ab9a76e320f0d0c7837abc3c","sha256":"5b7d9f39bb41ee8d2e9073102fae2ef7d96f9c579f8249d7901e8cba59c67841","sha512":"1f6f5bb113b09466de7ce4c2b12abfbb982f227d971ea6b923ce1ada5b2a24574c3d94e955b6a4cc9dc29d938b588faf142600070a4298baa626df7002f78d30","ssdeep":"","tlshash":"f8014ebe536311661a2365250fffc25d36ae0813f10be425bf8c55855f90b19c486f68","size":828,"data":"","first_seen":"2026-09-04T02:19:57.025792Z","last_seen":"2026-09-04T02:19:57.025792Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/js/intersection.js","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5ccb58e0e11b652a8c2c4ac6a93ec48","sha1":"af5a4cebc3c8a8f43ea70ae3dd5aa76313b7190c","sha256":"2d24ceb9caac0a872aadf00e38d5986ccf2fbac7ce00440084c4f74835d8276c","sha512":"9ced594a017bf3dea22b5750cdf4c5753a5c62b21f930da58ec0c1596c27153e3c2d4c89dab611d1df8120aaae21fcfed96602a3ba9bfad6be181774dfeae2e1","ssdeep":"","tlshash":"06e0d8c1697752afd0b74237120743227f1c1082108a55163fbc53670f95a267950a95","size":353,"data":"","first_seen":"2026-03-05T07:56:12.525698Z","last_seen":"2026-09-04T02:19:56.998441Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/code.jquery.com/jquery-3.6.1.min.js","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89664,"data":"","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-09-05T06:42:03.878094Z","times_seen":34866,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/code.jquery.com/ui/1.13.2/jquery-ui.min.js","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e2047978946a1d271356d0b557a84a3","sha1":"5f29a324c8affb1fdb26ad4564b1e044372beed2","sha256":"9528ca634fecad433d044ddd3e6f9ce1f068d5d932dafdbb19d8e6daea1968bd","sha512":"e7ba19fef5bc00d32347f290e817bdbfffbf87a6eaf7f9777f439ceef9faa8cab286f3ddd5cbca051596a73bb44289de226aabd929263b8312a94f91a47a26dd","ssdeep":"3072:eDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:uNdIVWjNS9cdzAV","tlshash":"8944f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","size":255084,"data":"","first_seen":"2023-03-07T18:39:57Z","last_seen":"2026-09-05T02:32:26.408123Z","times_seen":34170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Session initialized:xlz01","filename":"https://faceit.accsyncing.com/verification/step-2/","line_number":975,"column_number":29},{"level":"log","text":"Heartbeat:map[actor:server1.conn0.watcher17.process7//obj88 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[status:map[configurable:true enumerable:true value:ok writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://faceit.accsyncing.com/verification/step-2/","line_number":992,"column_number":39},{"level":"log","text":"Heartbeat:map[actor:server1.conn0.watcher17.process7//obj89 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[status:map[configurable:true enumerable:true value:ok writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://faceit.accsyncing.com/verification/step-2/","line_number":992,"column_number":39},{"level":"log","text":"Heartbeat:map[actor:server1.conn0.watcher17.process7//obj90 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[status:map[configurable:true enumerable:true value:ok writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://faceit.accsyncing.com/verification/step-2/","line_number":992,"column_number":39},{"level":"log","text":"Heartbeat:map[actor:server1.conn0.watcher17.process7//obj91 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[status:map[configurable:true enumerable:true value:ok writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://faceit.accsyncing.com/verification/step-2/","line_number":992,"column_number":39},{"level":"log","text":"Heartbeat:map[actor:server1.conn0.watcher17.process7//obj92 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[status:map[configurable:true enumerable:true value:ok writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://faceit.accsyncing.com/verification/step-2/","line_number":992,"column_number":39}]},"http":[{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/steps/1.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.135Z","timestamp":1788488357135,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/steps/1.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 61455\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-f00f\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61455,"size_decoded":61751,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit colormap, non-interlaced","md5":"e32a856ffbbfb56536d50b76a150b092","sha1":"44025a425d7246a71d86e90348e9741985d47793","sha256":"06725c1a1a900904128250cb95712bc8144d133a9937249aaf4a911bd54764e8","sha512":"2ba39462c9fda261a9ada31d7c9416fcbddde269890f3c4b0a4b3d94ba9b77cbc237849de32fe12b4a1a6271bafdd7b1d9be3e413216be1cc7b9209234a20e2f","ssdeep":"1536:rPOPYKf0LmpsXDc/7AQgP9h1Z8BsZG4Uha2O:v4sXwVgP9LMY","tlshash":"bf53f1b8b6414895cc6f82f25b8204ad09b3cc88d7f1419a7e9fb9180fb99ef15c7680","first_seen":"2025-08-04T02:14:22.595782Z","last_seen":"2026-09-04T02:19:56.937692Z","times_seen":98,"resource_available":false,"data":null}},"time_used":1035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1001,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/trade/file5.jpg","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.153Z","timestamp":1788488357153,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/trade/file5.jpg HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 92650\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-169ea\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92650,"size_decoded":92948,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 736x795, components 3","md5":"f514758f9b6b188685c36ebb447c0741","sha1":"17383590cb73781a4cad5de1f4ea97c82b2efaea","sha256":"7f50b2c1599f99e217b88ed20d5a8a7883eb146f44e921fe1b8d911e81b676ff","sha512":"c94b2935c8a0166eb7b684662fb19a38f02ea1d1375dc31e548e8a73d6aaf0720afa1366230b800e6769cceeef2d908023ca1a47572946a9e78389cd1867da80","ssdeep":"1536:KBPiaG49WRjhqojyjMjGsm29PeZSaJkyd3EQ6sdgd73xs2QQQQQQQQJx:s9WNoojyjMjY2Rend3EQfdEFQQQQQQQG","tlshash":"3593ae0798494a87905c83b93d475ebd7f0efa0caac976ef05221d8a7ed42290d4f16f","first_seen":"2026-09-04T02:19:56.938815Z","last_seen":"2026-09-04T02:19:56.938815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":985,"receive":806,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/code.jquery.com/ui/1.13.2/jquery-ui.min.js","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.115Z","timestamp":1788488357115,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /code.jquery.com/ui/1.13.2/jquery-ui.min.js HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: W/\"691e0b4c-3e46c\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":255084,"size_decoded":69113,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64399)","md5":"1e2047978946a1d271356d0b557a84a3","sha1":"5f29a324c8affb1fdb26ad4564b1e044372beed2","sha256":"9528ca634fecad433d044ddd3e6f9ce1f068d5d932dafdbb19d8e6daea1968bd","sha512":"e7ba19fef5bc00d32347f290e817bdbfffbf87a6eaf7f9777f439ceef9faa8cab286f3ddd5cbca051596a73bb44289de226aabd929263b8312a94f91a47a26dd","ssdeep":"3072:eDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:uNdIVWjNS9cdzAV","tlshash":"8944f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","first_seen":"2023-03-07T18:39:57Z","last_seen":"2026-09-05T02:32:26.408123Z","times_seen":34170,"resource_available":true,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/Padlock-3.1.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.145Z","timestamp":1788488357145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/Padlock-3.1.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 170739\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-29af3\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":170739,"size_decoded":171037,"mime_type":"image/png","magic":"PNG image data, 1142 x 1142, 8-bit colormap, non-interlaced","md5":"1dd67cb4f0e66592c10d7108ac62a715","sha1":"82768ea86b40508c4c1b9fd0f4d4b5f1761c434c","sha256":"5c670c807c5a739a64badf59f2e99a5baa9be315851d190346d6392bbeda5499","sha512":"eddf158a95b70a6c6a366471f7adef220852f9f56a1f3c774f8be8c21f75713927a14abffad0d11a31ca3380601c4274b4404c8590e18300e02f8d8747b08693","ssdeep":"3072:oDxfgDuh6WNtkvdP2LBy5x0fPF/vo1F6s+Mi72odDd8vR:oDmO6WNOFPUBSx05wDeMS2odZ6R","tlshash":"a6f312df886fff841006ea3ac989b83db582ab8d27f32a85050d175dc9953e75053b43","first_seen":"2025-08-04T05:50:45.28331Z","last_seen":"2026-09-04T02:19:56.941703Z","times_seen":94,"resource_available":false,"data":null}},"time_used":2038,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":992,"receive":1046,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/social/twitter.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.155Z","timestamp":1788488357155,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/social/twitter.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 845\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-34d\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":845,"size_decoded":1138,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"7b192a8454a8bf550da2f1d70bafe43e","sha1":"8cf2587f41b26b545444281a0597b3518663deb0","sha256":"a5e887f3cab99de5e6dde6e0b71f932a6c7c8d32b90cc951cb52fc26e5d2de9c","sha512":"fa00c602cb3000aebd116313f48f4d22c60989fdf6901bc1c8c614a4aa1058482bfbfbdcaaeaef1723caa6ae9d95095a1af872ec2e44ac607cbb5da08efb39cc","ssdeep":"","tlshash":"340196b955b53ef5e08045234b5e45ef92ead7024970600c4da895b207274244362ba0","first_seen":"2025-08-04T05:50:45.284425Z","last_seen":"2026-09-04T02:19:56.942829Z","times_seen":96,"resource_available":false,"data":null}},"time_used":1518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":982,"receive":536,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/section-scroll-bg.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.948Z","timestamp":1788488357948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/section-scroll-bg.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/style/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 634961\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-9b051\"\r\nexpires: Sat, 05 Sep 2026 02:19:18 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":634961,"size_decoded":635259,"mime_type":"image/png","magic":"PNG image data, 1393 x 1543, 8-bit colormap, non-interlaced","md5":"0a33b3d1e11494b3489c9668156c6f4c","sha1":"b6055cabc252060b281c478af7c547fa5e6914bb","sha256":"865f3b3e643eaa0460b6d665101132db6cfd914265be49a64510ed74a1c66847","sha512":"75bdcb689d106cc9ef39d5f2ef7db6c848d502f01a87b8ff09976fcbd9803cf7b9ef7be24228533155bbcc08e7b0bc9dc45d89ecf46a81feb64a6cf31b20d303","ssdeep":"12288:4H8Zloit/eXjvDpQP2qEMvkzywvDSzuZTwhwN4+eBh9He/KveIhba8i6pG+kY4+:4c8id21aixdLS8T6wi+eBh9+/Kvegba0","tlshash":"b5d42305673b07a6eba2e173706c6436f1f2319f1b6ee5865438a3896e58937f7024c3","first_seen":"2025-01-05T22:57:12.152761Z","last_seen":"2026-09-04T02:19:56.943642Z","times_seen":102,"resource_available":false,"data":null}},"time_used":1760,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":737,"receive":1023,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/image-98.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.147Z","timestamp":1788488357147,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/image-98.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 142351\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-22c0f\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":142351,"size_decoded":142649,"mime_type":"image/png","magic":"PNG image data, 397 x 415, 8-bit/color RGBA, non-interlaced","md5":"e27dbc1c113d8a7a761bbc6dcbd6ba9f","sha1":"aac4d21a85dd73624186212a01e8cc2c4e1c9c8e","sha256":"5ead4d639fbbf7f894e86c669408372d9f7d64864a72d52ec4c497f6277c8dca","sha512":"36863fd5eca9cc4228939238e7e3fafadf9a1871f15ef57c5bc5fb4be1741fb97e3a08e88895ebc4e8ebcd674ea720fdde26fdcd88b8f2333621c42c0c733ae9","ssdeep":"3072:ocGd/GE7gfjRB9+aWxAYmmu6SmiPmpxqZPKi6hWFjEA6w72SkyV:oc1xSAYmmu6nTpMNFzv2Sr","tlshash":"33d3133186e09dfa62550382947dc0d0de7d9f6ba5499b97d0046aeb08bfc2dcde2d4c","first_seen":"2025-08-04T05:50:45.30133Z","last_seen":"2026-09-04T02:19:56.945633Z","times_seen":94,"resource_available":false,"data":null}},"time_used":2036,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":990,"receive":1046,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/api/init","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.970Z","timestamp":1788488357970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"POST /api/init HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nOrigin: https://faceit.accsyncing.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"36-8ag+ePMAFvksgdxuy3aIyWiEf30\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":54,"size_decoded":325,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b678439a17b25ce48abe2035cad56b6f","sha1":"f1a83e78f30016f92c81dc6ecb7688c968847f7d","sha256":"056e2d76f90bb8f4c728fd4b613a49f0dc8f3d1343d06b0df70ccc5ba343b537","sha512":"cb2314ed04bc295debea02927fb95483a4c7be4495a6d6788a137c9638bafe4c537037c8eae339bd45068d9993066b26e9377213107022d9644f0bb17837ee5a","ssdeep":"","tlshash":"0b900241082a650054904a41114a543075de1fd15197cdc4979d1a351dc05e09025139","first_seen":"2026-09-04T02:19:56.94687Z","last_seen":"2026-09-04T02:19:56.94687Z","times_seen":1,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":715,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/api/check-auth?userId=xlz01","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:32.974Z","timestamp":1788488372974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /api/check-auth?userId=xlz01 HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"3d-bb9vpNk+1iOoZJSYzF1rZ9JVTC4\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61,"size_decoded":335,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"448ba62cea67bc2fec3664db555fb759","sha1":"6dbf6fa4d93ed623a8649498cc5d6b67d2554c2e","sha256":"a43b23408a59c1ad6cf450225992a53a25eff421b9e399897d7d65d5988cd440","sha512":"fec27cbe4db954ad85cd916b5f3498d00de21ebaad20167d4286dcd19b03e9384db9f5c09da1328cfb057df7ab5872add067d9bf461a87a960d7bf0bb7a23a4d","ssdeep":"","tlshash":"d1a00242116615109171db19545859b0825a72c324618d59d3546b290db45bd7015032","first_seen":"2026-09-04T02:19:56.948267Z","last_seen":"2026-09-04T02:19:56.948267Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/api/heartbeat","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:38.055Z","timestamp":1788488378055,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"POST /api/heartbeat HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nContent-Type: application/json\r\nContent-Length: 18\r\nOrigin: https://faceit.accsyncing.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"{\"userId\":\"xlz01\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 15\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"f-VaSQ4oDUiZblZNAEkkN+sX+q3Sg\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15,"size_decoded":265,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0f0479874bf6f4a7281099b15df27c27","sha1":"55a490e280d48996e564d00492437eb17faadd28","sha256":"a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288","sha512":"2c75ba98532392f27ff21ee337200edf6612b032c29d6005d66b7a974bc43f4496779c7c807a5c06a34f9dddffbf9c18647ff5c1f99cb48b113399efc3460c52","ssdeep":"","tlshash":"60600000000c00000cc00c00000c00303fff0fc0003f00c0000c00300f000c0c00c000","first_seen":"2023-04-05T03:59:49Z","last_seen":"2026-09-05T07:22:48.27593Z","times_seen":36977,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/style/style.css","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.109Z","timestamp":1788488357109,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/style/style.css HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Mon, 27 Jul 2026 19:15:43 GMT\r\netag: W/\"6a67ae5f-7545\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30021,"size_decoded":6081,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6bbf2394f4cd8360c0bbb126fa5b1a1a","sha1":"c9697c07647763ac2478054faa2aed52f110a405","sha256":"3c6cb39403dde974ac4593d39cb23e4a54cde87facdfdb63777a633ee29d347f","sha512":"f8022f9cc5f280138ed53c4fa2bb5a54a459c365ce297a5846f5074a05ce675dd51c331196b95f66731b4865d9415ec78c5c46f015c1ad496054f12cf8adba43","ssdeep":"384:1+H5dbiD9tvDQ0mzFVqqYgoFOt/YFjtixonWXdaWj:1+H5JiD9tNmzjIFOt/YF8xoWky","tlshash":"ddd2334d267379c1a42780be3fabe305213d41034a1aec787eba915c8f4d1a665937df","first_seen":"2026-09-04T02:19:56.952424Z","last_seen":"2026-09-04T02:19:56.952424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/menu.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.128Z","timestamp":1788488357128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/menu.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 457\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-1c9\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":457,"size_decoded":750,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"a799da96b72503b9e2ccd0b6ddc22bc6","sha1":"dafde6c34017a627288ff8fbdb22dfa3c9ee6ee0","sha256":"26c2ff5d5796cbd473b403b394f1088e25f8510abdd9401f6f5d6e47f1e7c9e4","sha512":"4c58b9801eb0ff561c4b00d4eb5191faf21a1d2b3363c480f88f1f9f5ba37e43fed058f6643aaf7ec54140c643949faa1255d68c3f3da38fea305c735ba00d51","ssdeep":"","tlshash":"ebf023c38a11d9d2e4030723076b012378bbc9c291af2a3cf754d0480a2c7dd8e32361","first_seen":"2025-04-15T19:20:51.432634Z","last_seen":"2026-09-04T02:19:56.95519Z","times_seen":103,"resource_available":false,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":753,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/check_mark.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.131Z","timestamp":1788488357131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/check_mark.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 439\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-1b7\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":439,"size_decoded":732,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"1c1573b163de389fdce42145d915e1fa","sha1":"e932c825fa64a0975dc18816f0954432bf255808","sha256":"bb2c4818caa63430f0d1378ec8d6d2ec18854d57f0e3f61f91910fee10458357","sha512":"4c037f658e56d2210b78c2b278f48ec0481c215c3939fd4d51044fa3e4ef69c325c21febb1f98c1a570bd49b0d302e72b3c30940eff50624b22d1663ffe9c01d","ssdeep":"","tlshash":"17f023e2a2117dc5c30a576a0d1a3340fb33a276401f0664a59fe01c4c1cbc84299fca","first_seen":"2025-09-28T16:57:11.012704Z","last_seen":"2026-09-04T02:19:56.95691Z","times_seen":11,"resource_available":false,"data":null}},"time_used":749,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":749,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/arrow_grey.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.149Z","timestamp":1788488357149,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/arrow_grey.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 580\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-244\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":580,"size_decoded":873,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"af7590c5ab7b0273e84d1e47a5bf934a","sha1":"1b6f90e5161fce3a31f79c16b2ead20262cf022f","sha256":"4d181f2cfdca9179020cb4df9cb7856112ecc9345996b3940fce3862963c628e","sha512":"b42174a94f94cf4f6725e707d3c1e4aa13716149c56e829fdff8e4267da49159ab69123180f46864fcb2626a5c0b588046834551ebc6d74cab4da01c77a99d49","ssdeep":"","tlshash":"e6f047c2a2016edcc55e071d08135261fe316915110606fcfbe1fb1c090df824a56a43","first_seen":"2025-09-28T16:57:11.025454Z","last_seen":"2026-09-04T02:19:56.963327Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":988,"receive":291,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/social/youtube.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.160Z","timestamp":1788488357160,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/social/youtube.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 612\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-264\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":612,"size_decoded":905,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"608dd386d5f3ab4f1bab06fbabfa8491","sha1":"97508178a6930ef3c088b70d56120dfb8806860c","sha256":"b4be1d600bb4510f31b3bfa25b5dcee342309082517bc439fed214ad1e28d189","sha512":"e073db35350f3d33028c6a4ec05b393d1844f0bc7b01702b6c5084b592a5d2669c22b6a1e2a515165ab934a748bc52d9814a1ce7d162ef874357159ce0f768ca","ssdeep":"","tlshash":"49f062fe0290002bd22f5eb2a6cf071ed9fb80a50912006082eeeb28e14e40a46d5a5b","first_seen":"2025-08-04T05:50:45.298428Z","last_seen":"2026-09-04T02:19:56.966539Z","times_seen":95,"resource_available":false,"data":null}},"time_used":1514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":978,"receive":536,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/code.jquery.com/ui/1.12.1/themes/base/jquery-ui.css","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.112Z","timestamp":1788488357112,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /code.jquery.com/ui/1.12.1/themes/base/jquery-ui.css HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: W/\"691e0b4c-8c85\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35973,"size_decoded":8731,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2363)","md5":"c4a88ec0cb998929a670c0c58d7dc526","sha1":"03135a88e8dbc36020dd453d1e7407ce9a3a2cc2","sha256":"44f8a56d427917b5fa0dd7933ba545679be5e6b3b93099e64a4e29c2159f57c0","sha512":"fd0d6c06abcd661796db2bc071c2a2bbfc5cfe8d80b434b68cd068cc312a03ff0c93f21c1fce77c2bc03486a80765ee317239639c79f2edc03777918a36efa1f","ssdeep":"192:10OW02ANbMb6l2n+brGtUQnSMfps3+eYQY+h572hk//r8Y5Y6BjSmMErEURHllPb:xMb/+vaW1e07/PiF5fy/EzDS25qb","tlshash":"10f20c316b432919ba1bd1a425a11bf7e32e1342ee1b6e7f609a345cc3d54e0c0bf5b4","first_seen":"2023-04-05T11:18:23Z","last_seen":"2026-09-04T20:20:42.883529Z","times_seen":10575,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/icons/down-arrow.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.136Z","timestamp":1788488357136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/icons/down-arrow.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 390\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-186\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":390,"size_decoded":683,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"38119c48d069b72bc7dca826fa26e510","sha1":"f794a0a3fd38850354b4b7210da59cfe3f5211ca","sha256":"c73580fe1bf2daff4f00c04a86d2da738c9f6259da1ae2d2795a220e4ad12a28","sha512":"a3fa50328ed4b3a5938f500d571ae830d8a9043d18a2c818e65a3cb945045cf7f1811dfc11b8517c4e61ac161f2e9c0babf428516b3619c34506b1497fa74664","ssdeep":"","tlshash":"10e0f1caf342a4e5e33827390f1f02f0a91f1f4817150033640388b4b06371958ca9b5","first_seen":"2025-08-04T05:50:45.293001Z","last_seen":"2026-09-04T02:19:56.968726Z","times_seen":93,"resource_available":false,"data":null}},"time_used":1034,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1000,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/steps/3.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.138Z","timestamp":1788488357138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/steps/3.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 64425\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-fba9\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64425,"size_decoded":64721,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit colormap, non-interlaced","md5":"52d9b9a3719911d6ef69def159dcbf29","sha1":"5f196e3fd93f5c3f9e76d22c7cc58ab2e5cec9a5","sha256":"72026f31c08a3db779d72065bc9578949abf311f3c9cf9628bd4c45f30786880","sha512":"191f280010c400faed826bf825674b791d9617d62f8023418172ea58b681c6d0f5010f8133f309336b1622910bc97590e73f76554a7dec3735441a5cfb8d7e57","ssdeep":"1536:dMXt4FgcSylEWag7RGTHt5NNhxuMNxZHRyVBz2K:2XS+cZlggQNXNWoxZQx","tlshash":"3b53014a9d64a2c2f148da32256938f62d2716cbccc487c6ff6d9e43af012bdc16d791","first_seen":"2025-08-04T02:14:22.602842Z","last_seen":"2026-09-04T02:19:56.96994Z","times_seen":98,"resource_available":false,"data":null}},"time_used":1254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":999,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/steps/4.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.139Z","timestamp":1788488357139,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/steps/4.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 141580\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-2290c\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":141580,"size_decoded":141878,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit colormap, non-interlaced","md5":"74940a5d07388158fe38d2cf2d5f6fef","sha1":"36a34693221a9f2eab159a84e29229ba0f41ad8f","sha256":"8f7225a19bcf1c008088be111789156f69a5df3862336a66c7b63b92e2bef6c8","sha512":"e6f54b567b50a336325fc04ad0885c9d7c3386668886803bdcc6b3bf3953a539cb8739620f26bd54818bafe077cdc12afaf7da641b99728eb00008505c2fd21a","ssdeep":"3072:dKyj3nzQagP6rq5q/CQCRfG9UD0rr1osiSw+vyKKowgc9h+:93ncagP6rqZNGCAr2rS/6KLwz9g","tlshash":"20d312430772d332b2d69704aadc35192e10ae7918ddc6bc5b06d2c3fb60bdc6c65a6d","first_seen":"2025-08-04T02:14:22.610402Z","last_seen":"2026-09-04T02:19:56.971947Z","times_seen":98,"resource_available":false,"data":null}},"time_used":1807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":998,"receive":809,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/favicon-footer.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.154Z","timestamp":1788488357154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/favicon-footer.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 9723\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-25fb\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9723,"size_decoded":10018,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"fe49c10cfdc493be66542cae7f3e6f59","sha1":"c23e199cae62af8dc6e4526d220ac73204cda2f5","sha256":"04fbe4d4ab574583d9d5d40a1ad3fe53530e171be139548cf185ebeb28becfee","sha512":"299cb25d3f66a289c92d0dd75c65edd27c5d3f90f16f6e1d926eeaa7a3cfd1c838d5f6620eff3644f1f6cfb2de17c2849aa6937b933b4c9ed1af43c8e85d5e6c","ssdeep":"192:9zRD7W+lojtj3OFUDLq2CmzxHlc1vGtX/EbBcbq3bxiQ9KkuZjWufRE:xRD7W+lodfDnrxHlcBGtXsb9bxluVE","tlshash":"f8129eb322f5e4e41c43a6b5d2956b9fe92751438af032b0f5091a6e85c9eac4377340","first_seen":"2025-01-05T22:57:12.227124Z","last_seen":"2026-09-04T02:19:56.972962Z","times_seen":99,"resource_available":false,"data":null}},"time_used":1520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":984,"receive":536,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/font/Play-Regular.ttf","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.963Z","timestamp":1788488357963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/font/Play-Regular.ttf HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/style/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:18 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 183852\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-2ce2c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":183852,"size_decoded":184110,"mime_type":"application/octet-stream; charset=utf-8","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright (c) 2011, Jonas Hecksher, Playtypes, e-types AS (lasse@e-types.com), with Reserved Fon","md5":"e9e488dd8b58512bd46ce94e57359ac7","sha1":"7e75d0a572065912ca2c79e7583df593c280cd66","sha256":"d30ffb8f0a87e451c90fda4892faea9b5fc35c4e92813eea2b2c4020f4f89dae","sha512":"ff61eaaa20b4c5f705e9f16b8e457f8cd2d6af349480cb26c84aad9dbb6be300656c09ab2787870ba413e1171199dda7389200d143f2992b84dac5d0c6643736","ssdeep":"3072:ZdviLNzF0Tuwb84nHKbB12tcTpetlvcslJrU5BQnu0/p70AwxCUDbw:ZdUXqKvFCx6BQJ/pA37bw","tlshash":"52046c13b769e30deb164f792528236ba396f922eb4f478bd5053a75e8b70e40c411cb","first_seen":"2023-07-04T11:44:12Z","last_seen":"2026-09-04T02:19:56.973755Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":722,"receive":783,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/api/check-ping-error?userId=xlz01","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:32.978Z","timestamp":1788488372978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /api/check-ping-error?userId=xlz01 HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"3d-bb9vpNk+1iOoZJSYzF1rZ9JVTC4\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":61,"size_decoded":335,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"448ba62cea67bc2fec3664db555fb759","sha1":"6dbf6fa4d93ed623a8649498cc5d6b67d2554c2e","sha256":"a43b23408a59c1ad6cf450225992a53a25eff421b9e399897d7d65d5988cd440","sha512":"fec27cbe4db954ad85cd916b5f3498d00de21ebaad20167d4286dcd19b03e9384db9f5c09da1328cfb057df7ab5872add067d9bf461a87a960d7bf0bb7a23a4d","ssdeep":"","tlshash":"d1a00242116615109171db19545859b0825a72c324618d59d3546b290db45bd7015032","first_seen":"2026-09-04T02:19:56.948267Z","last_seen":"2026-09-04T02:19:56.948267Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/vosklitsatelnyj_znak.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.132Z","timestamp":1788488357132,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/vosklitsatelnyj_znak.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 914\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-392\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":914,"size_decoded":1207,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"6f7c8920351eb2adbaf699d39741c4c3","sha1":"c3bb3a4605e2dcb7efaff3c3feb3724142341e4d","sha256":"0762ba1aede74890f1fe9903ab1e31da4a1f0e22b2c1ab000c69853c4eb22d58","sha512":"a3d26c50e0a26dee1592fb7a938f73f4ea3d9a6affcb17ba3dd8c15a2d728ff295b06c720c96451ec55e94dbffa1d33d02512b2ba90c04f7a75d16f75aa437db","ssdeep":"","tlshash":"721150a1a5d6b00bdf192f232a0a33847e538886c21c90eca015ed0916ac9aa9a50b98","first_seen":"2025-09-28T16:57:11.017536Z","last_seen":"2026-09-04T02:19:56.975308Z","times_seen":11,"resource_available":false,"data":null}},"time_used":749,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":749,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/font/Play-Bold.ttf","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.964Z","timestamp":1788488357964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/font/Play-Bold.ttf HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/style/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:18 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 194760\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-2f8c8\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":194760,"size_decoded":195018,"mime_type":"application/octet-stream; charset=utf-8","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright (c) 2011, Jonas Hecksher, Playtypes, e-types AS (lasse@e-types.com), with Reserved Fon","md5":"24a97beb3c5cd00f70f29ff1dcd1da37","sha1":"39b1149dc20ab0c4fad40361af3ded62da9096c3","sha256":"d7d058d9e63ecd0015086eaed165524e6cdaed91ff4d4e2018df0a21dbdc0d77","sha512":"0789812f24775b22f9d072ac1af47977c6424aa3720d8f5fcac845ebf2cc97616855d564aadf3efb172390a49e67f4e3701c97903a4482a3ce9d22889a0bbe2f","ssdeep":"3072:muerK8nJHrkeKPuQhWSYWMuFLQ2zSDCoQkmfwR2rHP9z6iVu/CR22W:muerShWSlMuFLQaSDhQb4RIHt6F72W","tlshash":"6f145b43b7aad704eb160b7525791327b392f922ab8b574fd00a3b75e8eb0d50c412cb","first_seen":"2023-07-04T11:44:12Z","last_seen":"2026-09-04T02:19:56.978299Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":721,"receive":784,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/image-89.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.146Z","timestamp":1788488357146,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/image-89.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 110334\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-1aefe\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":110334,"size_decoded":110632,"mime_type":"image/png","magic":"PNG image data, 623 x 415, 8-bit/color RGBA, non-interlaced","md5":"1079936c60f64c5da31c6d847e49b0dc","sha1":"259e15fba1b6720e7acab7b5fb0b051f3fe4db53","sha256":"e810944925f9d3fff2ba4753407d0a1efc80ca84de73e84f92f8fa4777919423","sha512":"8b0a8dd3239831f683faa25c5ed24308fcffb2c984b05bc66a0ff1c5f7f37fd466abc48c838a12a4a666b6a281d7e29996fd42ecfaa043137eca467504b5c268","ssdeep":"3072:ApTseiX8iwgWNm/CDxK5Za9bPJ+LQaEV7vHHzFc:8eX8iwgWaCDqI9bPg1o7Jc","tlshash":"e7b312de760801af503f5bec8f78505b6a4ab7c53b40e00fac45613eda4eaa70969773","first_seen":"2025-08-04T05:50:45.275988Z","last_seen":"2026-09-04T02:19:56.9796Z","times_seen":95,"resource_available":false,"data":null}},"time_used":1539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":991,"receive":548,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/api/heartbeat","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:43.057Z","timestamp":1788488383057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"POST /api/heartbeat HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nContent-Type: application/json\r\nContent-Length: 18\r\nOrigin: https://faceit.accsyncing.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"{\"userId\":\"xlz01\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 15\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"f-VaSQ4oDUiZblZNAEkkN+sX+q3Sg\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15,"size_decoded":265,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0f0479874bf6f4a7281099b15df27c27","sha1":"55a490e280d48996e564d00492437eb17faadd28","sha256":"a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288","sha512":"2c75ba98532392f27ff21ee337200edf6612b032c29d6005d66b7a974bc43f4496779c7c807a5c06a34f9dddffbf9c18647ff5c1f99cb48b113399efc3460c52","ssdeep":"","tlshash":"60600000000c00000cc00c00000c00303fff0fc0003f00c0000c00300f000c0c00c000","first_seen":"2023-04-05T03:59:49Z","last_seen":"2026-09-05T07:22:48.27593Z","times_seen":36977,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/code.jquery.com/jquery-3.6.1.min.js","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.114Z","timestamp":1788488357114,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /code.jquery.com/jquery-3.6.1.min.js HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: W/\"691e0b4c-15e40\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89664,"size_decoded":31528,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-09-05T06:42:03.878094Z","times_seen":34866,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/player.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.134Z","timestamp":1788488357134,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/player.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 189290\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-2e36a\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":189290,"size_decoded":189588,"mime_type":"image/png","magic":"PNG image data, 350 x 415, 8-bit/color RGBA, non-interlaced","md5":"37b0afe78fee66ba4f6f107f4e3b682b","sha1":"40187d9a1d0a12f17f6cb91ac183c07f9b0b479b","sha256":"5b5ee354effd393c9dc23fbfa68bc1621738cef36bde227ab40ff4ea8e4b9251","sha512":"0e7455f366812d045a75d6ec332574be5bd6f99290176f0416d381427357dd89445cc4ce02c4817540d81f991b0594c8218890327df25d420358a8ee0a809844","ssdeep":"3072:Y9Tgu2G4dn6Lo5iTZcONfIwFrb1NwTl3/EYNQSB5LPELqisDeCJVfD+fi:ov4xlwTZcON3wx38KDEjsD1","tlshash":"9d0413f4c87ee14e1bb6dab1e7e78a6a88114fc5175e46424beef932c24b2805146cf1","first_seen":"2025-01-05T22:57:12.12258Z","last_seen":"2026-09-04T02:19:56.981398Z","times_seen":119,"resource_available":false,"data":null}},"time_used":1811,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1002,"receive":809,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/step-2/","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T02:19:15.875Z","timestamp":1788488355875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/step-2/ HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery UI:1.13.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}],"data":{"size":91019,"size_decoded":18386,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (743)","md5":"060e58a3ac24b197570144a32790acd5","sha1":"9818b07810238b026992b680947117f1e21ebfe3","sha256":"394fadc4bea8019416a7b23a3551ba40d72e18fda5b5b84756069ef664ea9c7a","sha512":"546a209c1194e5ee7b764131c6409b9b98ce3309a7fbf743f2b9e1639c3ebb3dbb2a7e0f8450a8d608bd0ccc6441cc56d0100f0e20adb28d720a45177e1b354a","ssdeep":"1536:JRCzMATG9rkczEXs6smtTklE+9sVjYOxw:kGDmC5Oxw","tlshash":"b093b762a9f300a3019380a36f67776a3e7780179306cd5476bd57986fcaf56c9a32cc","first_seen":"2026-09-04T02:19:56.982996Z","last_seen":"2026-09-04T02:19:56.982996Z","times_seen":1,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":-1,"dns":3,"connect":257,"send":0,"wait":256,"receive":0,"ssl":268},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/logo.svg","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.130Z","timestamp":1788488357130,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/logo.svg HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: W/\"691e0b4c-5b3\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1459,"size_decoded":1061,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"62ff6d33297396336a259ceb45215472","sha1":"fe410d46858c51bd6ab33a050e59039d2e4ee678","sha256":"1c0554b13eecf0a739e85af3155a3a5e9c97c60a57bf7da6896baf4f3def222d","sha512":"866bc16abec26717a6343857ee14ddec5b408bf9753029488fb6fafb04438e0951c4684699a0da2d1b5d7178f20e2aaf01b606fb636fcf9d4f3d40050762fc47","ssdeep":"","tlshash":"f13145d92614e25c8b63c74d6e1da855f24950fcf49280c6952dfb75c1527c4c606d28","first_seen":"2025-01-17T13:46:12.758659Z","last_seen":"2026-09-04T02:19:56.984412Z","times_seen":18,"resource_available":false,"data":null}},"time_used":751,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":751,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/api/check-error?userId=xlz01","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:32.971Z","timestamp":1788488372971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /api/check-error?userId=xlz01 HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"3d-bb9vpNk+1iOoZJSYzF1rZ9JVTC4\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":61,"size_decoded":335,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"448ba62cea67bc2fec3664db555fb759","sha1":"6dbf6fa4d93ed623a8649498cc5d6b67d2554c2e","sha256":"a43b23408a59c1ad6cf450225992a53a25eff421b9e399897d7d65d5988cd440","sha512":"fec27cbe4db954ad85cd916b5f3498d00de21ebaad20167d4286dcd19b03e9384db9f5c09da1328cfb057df7ab5872add067d9bf461a87a960d7bf0bb7a23a4d","ssdeep":"","tlshash":"d1a00242116615109171db19545859b0825a72c324618d59d3546b290db45bd7015032","first_seen":"2026-09-04T02:19:56.948267Z","last_seen":"2026-09-04T02:19:56.948267Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/players.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.139Z","timestamp":1788488357139,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/players.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 242652\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-3b3dc\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":242652,"size_decoded":242950,"mime_type":"image/png","magic":"PNG image data, 1020 x 778, 8-bit colormap, non-interlaced","md5":"516b2ecdc268b171e65d7f9499450bac","sha1":"3a1a5762a1515ddcb4dd05fd41cc4bd4ecd7f7eb","sha256":"1e4b7408604c813bb0a9297844579f2c44f750f96547805d7ef49b089880f8cf","sha512":"a95905f89ea1fc55186607d5f180b31dfe884aa633f86a82d464d1baf88d461b9f50fc908d96f78b4276f267d4795bf176f16202bcc06c831673b9e20072205b","ssdeep":"6144:mRuE0wKuPxD1IWLYmIgHjfUOYAQVp4pBl:oud+PEUYmXHjvXapI","tlshash":"a3342315832ef685ae9dc0e85c41b8dddbe14dc43d9caa1e3135b65a0236243cfddaac","first_seen":"2025-08-04T05:50:45.305775Z","last_seen":"2026-09-04T02:19:56.985773Z","times_seen":95,"resource_available":false,"data":null}},"time_used":2306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":997,"receive":1309,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/img-lok-1.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.141Z","timestamp":1788488357141,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/img-lok-1.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 159228\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-26dfc\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":159228,"size_decoded":159526,"mime_type":"image/png","magic":"PNG image data, 1142 x 1142, 8-bit colormap, non-interlaced","md5":"9547f79adfa3f6c9167ca4a1dcd80290","sha1":"e9e2ff9d768a1d2fb9349487239003903984ac94","sha256":"4ea0773c28c7bd66e1481b5190c79ebb87805d16966d41b39cd662d3384ed1e4","sha512":"04a9c4257275688bbc21b30162b1981c451337da466a1cbf8dec93d09028be72cd3adf1de30fdcddf8b87ebdf6634054d6898cf8a182f644a003f4659ac654a7","ssdeep":"3072:PXrp8Nb48fVffGr3sQEDDRhz59OaqTu/G97E6T9dUdCZSDHk:PbuNbLff+srDR2u/Y7E6T2CgDHk","tlshash":"42f312ddee711a39ea120735e056d7e93d014b2877778a5b7a4eabbdb05850c320073b","first_seen":"2025-08-04T05:50:45.28983Z","last_seen":"2026-09-04T02:19:56.986621Z","times_seen":94,"resource_available":false,"data":null}},"time_used":2041,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":995,"receive":1046,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/section-main-bg.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.946Z","timestamp":1788488357946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/section-main-bg.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/style/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 886631\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-d8767\"\r\nexpires: Sat, 05 Sep 2026 02:19:18 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":886631,"size_decoded":886929,"mime_type":"image/png","magic":"PNG image data, 2560 x 1715, 8-bit colormap, non-interlaced","md5":"da71280b849b9a45f8330bc9e47068b6","sha1":"26efd7f9fd345951e33797171dd6086f51dda5b0","sha256":"f8994a13a1059cc0fcbe42a96a53baa258510351a7426407403c58471ef36d62","sha512":"9edcf3a647fa70b71bf9dc1d76b914f581eb48f704e1acb60fcc67c52e27801a113725698bc957ef19dc30e110cf65868fdf9a644b4da35fc8b8ef0e1f31570b","ssdeep":"24576:aeQekcUrO5nXPY8e2f1PjDD0dBlTt6p+zEgV9waSxBp:s9wXg8eWj30dB0YEgUaGp","tlshash":"1c1523c09df87caad5a78b78a36c739d84c8320a452d6880311f536ee7a7d73179d271","first_seen":"2025-01-05T22:57:12.150607Z","last_seen":"2026-09-04T02:19:56.987685Z","times_seen":95,"resource_available":false,"data":null}},"time_used":1520,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":739,"receive":781,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/fav.ico","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:19.676Z","timestamp":1788488359676,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/fav.ico HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:19 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-10be\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":4514,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"61b773c9b673c77de7b2016bfaaea03f","sha1":"068eb24f4d7d6fcbca691507f3899045fd9d445f","sha256":"1cf357b4247c5cb6de66be4b1274a63c8ed5ee0490e50ace7ff10d18266a7938","sha512":"327a3d4bd566cdb8082e82b20e9a61b343b264a7adb5de6fc48386f88390b109df5877f474a481c2eed6e722026541b482e1af78012663e53e42afdc00f840fc","ssdeep":"24:sunaqswh3Jt3JmDahhhhhhh7E+yv1rua2J:pfh3JyDahhhhhhh00","tlshash":"78916d871d0f7c66caada17d129de17aa3770ef6db32a94109c3fc6334c482234968e5","first_seen":"2026-09-04T02:19:56.989521Z","last_seen":"2026-09-04T02:19:56.989521Z","times_seen":1,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/api/heartbeat","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:23.054Z","timestamp":1788488363054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"POST /api/heartbeat HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nContent-Type: application/json\r\nContent-Length: 18\r\nOrigin: https://faceit.accsyncing.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"{\"userId\":\"xlz01\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 15\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"f-VaSQ4oDUiZblZNAEkkN+sX+q3Sg\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15,"size_decoded":265,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0f0479874bf6f4a7281099b15df27c27","sha1":"55a490e280d48996e564d00492437eb17faadd28","sha256":"a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288","sha512":"2c75ba98532392f27ff21ee337200edf6612b032c29d6005d66b7a974bc43f4496779c7c807a5c06a34f9dddffbf9c18647ff5c1f99cb48b113399efc3460c52","ssdeep":"","tlshash":"60600000000c00000cc00c00000c00303fff0fc0003f00c0000c00300f000c0c00c000","first_seen":"2023-04-05T03:59:49Z","last_seen":"2026-09-05T07:22:48.27593Z","times_seen":36977,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/DaonLogo.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.143Z","timestamp":1788488357143,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/DaonLogo.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 14177\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-3761\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14177,"size_decoded":14473,"mime_type":"image/png","magic":"PNG image data, 786 x 250, 8-bit/color RGBA, non-interlaced","md5":"63f50cfead0a68b69ebc53eb8f72306d","sha1":"b0ba2c2d346741494384565ee0d9bfadb5e83e6f","sha256":"ebc72ec3c1b16dea4f741f3b029c1c0fed50081d65b3ef754292bcb4571afed0","sha512":"1111fa8f3c483b5f7fa609781c5406488b065c3e8a04c96f7e79a1ae75b64116bb0f5d6a7e73eb37df15d7899ce2a19d611de815946fcb5da70fcbd73291607d","ssdeep":"384:MxppPeDafNP3OUgUeUw6OVIyGdpMn3uSZ0qyFgdvXJNvdZVb:MRZ33g1UOGqn3uS14g5JjZ1","tlshash":"d352c0397b24c025ccd9614c8eb514f7e281a9cccdfb682bd2bcfd55af1941096e4b86","first_seen":"2025-08-04T05:50:45.29552Z","last_seen":"2026-09-04T02:19:56.991029Z","times_seen":93,"resource_available":false,"data":null}},"time_used":1251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":993,"receive":258,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/trade/file1.jpg","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.148Z","timestamp":1788488357148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/trade/file1.jpg HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 281533\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-44bbd\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":281533,"size_decoded":281832,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 754x954, components 3","md5":"ce724a264f52e909680f14970fd80d1e","sha1":"37db7b140cbbf2c544207db4a6dc58cca4497ef7","sha256":"d09c17c5f4c0033122dbee2c12926514f481ec86e9dea735f2984fa7d68fca82","sha512":"896dbb567ace77bd49e124abb80c071c7154aba52aec23b8ab1ddcfae812f1ec43bf6ec9403142ea469d3e163a6fcb835f185f7810cbfefad308c0304cf54072","ssdeep":"3072:r4R8ofK9M0w4fPpkcbXWdeXhig13tKY5dUTHcjjjjNZ5vtqv4yxz4p0O3nZHJu6O:r4R8oK91fRkbeJ97dUTAVOT4pb6H7D","tlshash":"e854f133c3d80e89073ad3658568d959321643ad7d65026aa270763eeef3d8e36431fb","first_seen":"2026-09-04T02:19:56.992404Z","last_seen":"2026-09-04T02:19:56.992404Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":989,"receive":1573,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/api/heartbeat","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:28.056Z","timestamp":1788488368056,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"POST /api/heartbeat HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nContent-Type: application/json\r\nContent-Length: 18\r\nOrigin: https://faceit.accsyncing.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"{\"userId\":\"xlz01\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 15\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"f-VaSQ4oDUiZblZNAEkkN+sX+q3Sg\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15,"size_decoded":265,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0f0479874bf6f4a7281099b15df27c27","sha1":"55a490e280d48996e564d00492437eb17faadd28","sha256":"a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288","sha512":"2c75ba98532392f27ff21ee337200edf6612b032c29d6005d66b7a974bc43f4496779c7c807a5c06a34f9dddffbf9c18647ff5c1f99cb48b113399efc3460c52","ssdeep":"","tlshash":"60600000000c00000cc00c00000c00303fff0fc0003f00c0000c00300f000c0c00c000","first_seen":"2023-04-05T03:59:49Z","last_seen":"2026-09-05T07:22:48.27593Z","times_seen":36977,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/social/inst.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.156Z","timestamp":1788488357156,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/social/inst.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 345\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-159\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":345,"size_decoded":638,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"5ee082bb4534fbc6b341279378fb72b8","sha1":"30c9e24461d8baf87b540534d5e6ca39326a75b7","sha256":"156b40c57497b4cf64d1d6e6a05e56a568b4935636a6ca873246fec7166a21d0","sha512":"b16b4bfd7cba2812431fbe71ef95f43026d4cd9e2f4e318d59c851c7698996c022548f47b1ed150d2b371027a09ba0613a3a4f77e141f68a8f3ae5c0ab54d4c8","ssdeep":"","tlshash":"92e0c6ce5348097bf64db862603f12228cb303ba02098a8bd048e12876466a5856b4e2","first_seen":"2025-08-04T05:50:45.285514Z","last_seen":"2026-09-04T02:19:56.994254Z","times_seen":96,"resource_available":false,"data":null}},"time_used":1517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":981,"receive":536,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/social/twitch.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.158Z","timestamp":1788488357158,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/social/twitch.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 223\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-df\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223,"size_decoded":515,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"5e0dfe53175829af58d212bf9e9b61f5","sha1":"3d0df2d64cde694220ddf9eb05307627c766538b","sha256":"6b2b83e2af00bd4db335105a5d719fa209bf9a77276f6b8053467b4f0e288146","sha512":"5081efdf7f4ef721c808daac305f70048815a46d3c10695912c0d04f2033bf52a89bd2aa2f2f63d79f52c979f85ff1d154f930da3280a33261cda7822dab3888","ssdeep":"","tlshash":"21d0a7db56858a6f906cd23b60160d4459e36e94886375159161b8f4242da9461c2e52","first_seen":"2025-08-04T05:50:45.300228Z","last_seen":"2026-09-04T02:19:56.995138Z","times_seen":96,"resource_available":false,"data":null}},"time_used":1516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":980,"receive":536,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/social/facebook.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.159Z","timestamp":1788488357159,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/social/facebook.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 742\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-2e6\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":742,"size_decoded":1035,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"32158f84f0ed03527d8785207ce38719","sha1":"4fecb0c9a496cafef7af09c7bb6963a04e76eab8","sha256":"01b257b254cea6ab5d9590d3a41b43932ae7f9dfa6d7894dd78cc76f60e89972","sha512":"1299455ab3e84378d523c7d8525631642d785376382da1ee4aa8cd6e754e6bc65ee0479577c45ca6890333d90b3b189e45cd370bf7605b8db4ba30c2df4a9fe2","ssdeep":"","tlshash":"500165af6d9d98b183188d24a5eb4456de0f188e10725d7c4feb06b4117314c2b0e72f","first_seen":"2025-08-04T05:50:45.287293Z","last_seen":"2026-09-04T02:19:56.995929Z","times_seen":96,"resource_available":false,"data":null}},"time_used":1515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":979,"receive":536,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/api/check-family?userId=xlz01","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:32.969Z","timestamp":1788488372969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /api/check-family?userId=xlz01 HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"3d-bb9vpNk+1iOoZJSYzF1rZ9JVTC4\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61,"size_decoded":335,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"448ba62cea67bc2fec3664db555fb759","sha1":"6dbf6fa4d93ed623a8649498cc5d6b67d2554c2e","sha256":"a43b23408a59c1ad6cf450225992a53a25eff421b9e399897d7d65d5988cd440","sha512":"fec27cbe4db954ad85cd916b5f3498d00de21ebaad20167d4286dcd19b03e9384db9f5c09da1328cfb057df7ab5872add067d9bf461a87a960d7bf0bb7a23a4d","ssdeep":"","tlshash":"d1a00242116615109171db19545859b0825a72c324618d59d3546b290db45bd7015032","first_seen":"2026-09-04T02:19:56.948267Z","last_seen":"2026-09-04T02:19:56.948267Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/api/heartbeat","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:33.056Z","timestamp":1788488373056,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"POST /api/heartbeat HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nContent-Type: application/json\r\nContent-Length: 18\r\nOrigin: https://faceit.accsyncing.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"{\"userId\":\"xlz01\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 15\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"f-VaSQ4oDUiZblZNAEkkN+sX+q3Sg\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15,"size_decoded":265,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0f0479874bf6f4a7281099b15df27c27","sha1":"55a490e280d48996e564d00492437eb17faadd28","sha256":"a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288","sha512":"2c75ba98532392f27ff21ee337200edf6612b032c29d6005d66b7a974bc43f4496779c7c807a5c06a34f9dddffbf9c18647ff5c1f99cb48b113399efc3460c52","ssdeep":"","tlshash":"60600000000c00000cc00c00000c00303fff0fc0003f00c0000c00300f000c0c00c000","first_seen":"2023-04-05T03:59:49Z","last_seen":"2026-09-05T07:22:48.27593Z","times_seen":36977,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/verif-stars.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.133Z","timestamp":1788488357133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/verif-stars.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 261826\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-3fec2\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":261826,"size_decoded":262124,"mime_type":"image/png","magic":"PNG image data, 1800 x 830, 8-bit colormap, non-interlaced","md5":"b315cde9b8714a92b3e181bb71056cd3","sha1":"b7902edb831374d78eb8d12be379658bfe7f5eed","sha256":"e488f2d40d280c97da8c08e9080e17e21d4a6b8c17f25fda6cb0a45f609392c5","sha512":"e639078cfe915d9f746e52647fba107da6a2eac4eea5cb158800e40652523507d5db7d49400e39ab60dd67c21f0ee02aba22956987be030ebf17ac59e22bd9ca","ssdeep":"6144:9gPuDxB3Qel47/ejvQGkEHjIQ5TaJyGVmw7MvHGZz3x:WPOHdlvQG3kQ5Ta5MvmZzB","tlshash":"82442336053181bba7f0f8d089f8ed5ac07421a5b6273f407b2b967a35d50992ad0e7d","first_seen":"2025-08-04T05:50:45.277773Z","last_seen":"2026-09-04T02:19:56.99759Z","times_seen":93,"resource_available":false,"data":null}},"time_used":1812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":748,"receive":1064,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/js/intersection.js","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.110Z","timestamp":1788488357110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/js/intersection.js HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: W/\"691e0b4c-161\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":353,"size_decoded":537,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"f5ccb58e0e11b652a8c2c4ac6a93ec48","sha1":"af5a4cebc3c8a8f43ea70ae3dd5aa76313b7190c","sha256":"2d24ceb9caac0a872aadf00e38d5986ccf2fbac7ce00440084c4f74835d8276c","sha512":"9ced594a017bf3dea22b5750cdf4c5753a5c62b21f930da58ec0c1596c27153e3c2d4c89dab611d1df8120aaae21fcfed96602a3ba9bfad6be181774dfeae2e1","ssdeep":"","tlshash":"06e0d8c1697752afd0b74237120743227f1c1082108a55163fbc53670f95a267950a95","first_seen":"2026-03-05T07:56:12.525698Z","last_seen":"2026-09-04T02:19:56.998441Z","times_seen":8,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/trade/file3.jpg","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.150Z","timestamp":1788488357150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/trade/file3.jpg HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 139379\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-22073\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":139379,"size_decoded":139678,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 591x1212, components 3","md5":"da1afa80dfc67277b1737490d130bbe4","sha1":"ba3e1cd317d9df6891abe4e230fabea0eaa6b001","sha256":"f26652b08755f9ed8f08b02f60e7cde3d93a257f4e05152c325a1ae1d41790b3","sha512":"dda0add62aefa1d4ba4e74d3b3a145385b1cda126e7e7e84b205a4040158609a3a61ff32febfb40e13534d2238b35a2ecc990b7b552b5cd5d8fc54a875e1ad59","ssdeep":"3072:7CDwRoMvHNF/xS4H8agHha5XdQoCfjmJJtS5lR:7CMRvNFks9dQVPv","tlshash":"ebd3d1272564de66820986d6fe939d9c7f60834cf14e30ae07424d8ffbd23a99cd542e","first_seen":"2026-09-04T02:19:57.000103Z","last_seen":"2026-09-04T02:19:57.000103Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":987,"receive":1307,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/api/check-success?userId=xlz01","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:32.973Z","timestamp":1788488372973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /api/check-success?userId=xlz01 HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"3d-bb9vpNk+1iOoZJSYzF1rZ9JVTC4\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61,"size_decoded":335,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"448ba62cea67bc2fec3664db555fb759","sha1":"6dbf6fa4d93ed623a8649498cc5d6b67d2554c2e","sha256":"a43b23408a59c1ad6cf450225992a53a25eff421b9e399897d7d65d5988cd440","sha512":"fec27cbe4db954ad85cd916b5f3498d00de21ebaad20167d4286dcd19b03e9384db9f5c09da1328cfb057df7ab5872add067d9bf461a87a960d7bf0bb7a23a4d","ssdeep":"","tlshash":"d1a00242116615109171db19545859b0825a72c324618d59d3546b290db45bd7015032","first_seen":"2026-09-04T02:19:56.948267Z","last_seen":"2026-09-04T02:19:56.948267Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/api/check-ping-new?userId=xlz01","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:32.980Z","timestamp":1788488372980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /api/check-ping-new?userId=xlz01 HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"3d-bb9vpNk+1iOoZJSYzF1rZ9JVTC4\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":61,"size_decoded":335,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"448ba62cea67bc2fec3664db555fb759","sha1":"6dbf6fa4d93ed623a8649498cc5d6b67d2554c2e","sha256":"a43b23408a59c1ad6cf450225992a53a25eff421b9e399897d7d65d5988cd440","sha512":"fec27cbe4db954ad85cd916b5f3498d00de21ebaad20167d4286dcd19b03e9384db9f5c09da1328cfb057df7ab5872add067d9bf461a87a960d7bf0bb7a23a4d","ssdeep":"","tlshash":"d1a00242116615109171db19545859b0825a72c324618d59d3546b290db45bd7015032","first_seen":"2026-09-04T02:19:56.948267Z","last_seen":"2026-09-04T02:19:56.948267Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/x.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.129Z","timestamp":1788488357129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/x.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 531\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-213\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":531,"size_decoded":824,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"1724756d52613b74ed25743a875cb5a3","sha1":"a5036859985c49e8fbd04f5ec941a59b31444253","sha256":"4cdb9c5b06498749f661774cc98014f3c80a2ff80df70ad174b5aafa92f9404b","sha512":"448425ce53cff9703e478b3bca8510136eb1ded3a107bdb6c0bd6699586269c7ea6123c888877435d188bbac07020c854a6b692dfa17eb8568ad0aee9ebd464e","ssdeep":"","tlshash":"e1f020c2c3b820d4c606265b2a1a0213fc72868e043b0f3c93adf90a9908e849114e80","first_seen":"2025-08-04T05:50:45.274156Z","last_seen":"2026-09-04T02:19:57.003386Z","times_seen":88,"resource_available":false,"data":null}},"time_used":752,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":752,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/steps/2.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.137Z","timestamp":1788488357137,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/steps/2.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 43611\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-aa5b\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43611,"size_decoded":43907,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit colormap, non-interlaced","md5":"3b1f9d993727a4725fd71722dece106f","sha1":"9d35c6f70ef2937c357dd4a90df5aa42bdf26e0f","sha256":"131db747bbb5e6f57f8301a3fe9b805b73006923479db53311650ea0c74d9e67","sha512":"7d75e39f2fd3ded23f0f51dc4446ea7a250c127e202dc83eb41c83f45859249fd113e6781282d7d357e780bff4700b22f91a5c920953973a28b48a7bce5fbe58","ssdeep":"768:rfkH94I6XIyXPe1O5Ms7gvRJAazHkUAlA3higqtSLSD6O27rOpl:rfkHL64yfeYKs7MAazHqA3zqULwr27ra","tlshash":"4713e14a29740d85e64e4b7620e1112a2b634d835ae3a0153dee3c4bfff18af8f515f2","first_seen":"2025-08-04T02:14:22.544263Z","last_seen":"2026-09-04T02:19:57.004384Z","times_seen":96,"resource_available":false,"data":null}},"time_used":1034,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1000,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/trade/file4.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.152Z","timestamp":1788488357152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/trade/file4.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 141580\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-2290c\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":141580,"size_decoded":141878,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit colormap, non-interlaced","md5":"74940a5d07388158fe38d2cf2d5f6fef","sha1":"36a34693221a9f2eab159a84e29229ba0f41ad8f","sha256":"8f7225a19bcf1c008088be111789156f69a5df3862336a66c7b63b92e2bef6c8","sha512":"e6f54b567b50a336325fc04ad0885c9d7c3386668886803bdcc6b3bf3953a539cb8739620f26bd54818bafe077cdc12afaf7da641b99728eb00008505c2fd21a","ssdeep":"3072:dKyj3nzQagP6rq5q/CQCRfG9UD0rr1osiSw+vyKKowgc9h+:93ncagP6rqZNGCAr2rS/6KLwz9g","tlshash":"20d312430772d332b2d69704aadc35192e10ae7918ddc6bc5b06d2c3fb60bdc6c65a6d","first_seen":"2025-08-04T02:14:22.610402Z","last_seen":"2026-09-04T02:19:56.971947Z","times_seen":98,"resource_available":false,"data":null}},"time_used":2293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":986,"receive":1307,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/api/check-farmbot?userId=xlz01","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:32.976Z","timestamp":1788488372976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /api/check-farmbot?userId=xlz01 HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"3d-bb9vpNk+1iOoZJSYzF1rZ9JVTC4\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61,"size_decoded":335,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"448ba62cea67bc2fec3664db555fb759","sha1":"6dbf6fa4d93ed623a8649498cc5d6b67d2554c2e","sha256":"a43b23408a59c1ad6cf450225992a53a25eff421b9e399897d7d65d5988cd440","sha512":"fec27cbe4db954ad85cd916b5f3498d00de21ebaad20167d4286dcd19b03e9384db9f5c09da1328cfb057df7ab5872add067d9bf461a87a960d7bf0bb7a23a4d","ssdeep":"","tlshash":"d1a00242116615109171db19545859b0825a72c324618d59d3546b290db45bd7015032","first_seen":"2026-09-04T02:19:56.948267Z","last_seen":"2026-09-04T02:19:56.948267Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faceit.accsyncing.com/verification/img/logo.png","fqdn":"faceit.accsyncing.com","domain":"accsyncing.com","tld":"com"},"ip":{"addr":"23.145.248.106","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faceit.accsyncing.com/verification/step-2/","date":"2026-09-04T02:19:17.126Z","timestamp":1788488357126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faceit.accsyncing.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 20:48:27 GMT","end":"Thu, 29 Oct 2026 20:48:26 GMT"},"fingerprint":{"sha1":"E1:50:1B:D2:56:A3:92:7E:FE:B3:6A:61:AF:61:A4:08:71:B6:27:DB","sha256":"DF:70:24:38:6C:91:19:A5:7F:E8:C5:02:5D:2F:94:D9:66:A9:07:E9:0C:64:54:AE:AA:FB:72:DA:B6:C7:D5:79"}}},"request":{"raw":"GET /verification/img/logo.png HTTP/1.1\r\nHost: faceit.accsyncing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faceit.accsyncing.com/verification/step-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 04 Sep 2026 02:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 1908\r\nlast-modified: Wed, 19 Nov 2025 18:24:12 GMT\r\netag: \"691e0b4c-774\"\r\nexpires: Sat, 05 Sep 2026 02:19:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1908,"size_decoded":2202,"mime_type":"image/png","magic":"PNG image data, 350 x 51, 8-bit/color RGBA, non-interlaced","md5":"1d087f4b49d571becb05138581b37557","sha1":"815a2b1b704a09ed1cbe88ec2c7cb4ad7126fcc4","sha256":"e8c3b6b052600f0206205b802e8d6774da926f2b6cffd38a164ddac1714c5d3a","sha512":"ecbd6053b79a1171bade56a39aa5fc068ff0601fe6f20a26d5b406e1200c482f566c6aaaf29d650f5a5ff9fca5f24eda4dfad0a0624048f96ef6fcd81e534de8","ssdeep":"","tlshash":"99411bea5fa1167ec0cef39d0706f968312e967b200140977a57c6175172c7bd8e6560","first_seen":"2025-01-05T22:57:12.125142Z","last_seen":"2026-09-04T02:19:57.00506Z","times_seen":128,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":754,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"faceit.accsyncing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}