Anti spoofer

5 seconds after joining the server reads the player's hardware tokens. A real Windows PC has several token types. All tokens of one type, all identical, or no tokens at all is reported.

Measured by the server. The player cannot fake or block it.

These are the values shown under the detection in the Threat feed and on the player page.

tokens

Number of hardware tokens the player has (0 = none at all).

types

Number of different token types (a normal PC has several).

unique

Number of different token values.

Some virtual machines, Linux/Proton players and very old FiveM builds.

Log. Useful together with other signals.

The action (Off, Log, Kick, Ban) is set per detection on the Protection page. It only applies when Enforcement is on Custom. See Actions, modes & numbers.

Heartbeat timeoutdefault 75 s

Silence before a player who is still playing is reported. Plain silence waits at least 120 s.