{"report_id":"0600f347-db48-45be-b4df-a16da9fe8c0e","version":6,"status":"done","tags":[],"date":"2025-10-05T08:48:49Z","url":{"schema":"http","addr":"cs-case.ru/","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":0,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"cs-case.ru/","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"title":"Открывай кейсы КС и получай уникальные скины CS:GO!"},"submit":{"url":{"schema":"http","addr":"cs-case.ru/","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":0,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-09T08:48:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"images.steamcdn.io","ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"domain_registered":"2018-05-31","domain_rank":0,"first_seen":"2019-01-15T15:31:16Z","last_seen":"2025-10-03T16:09:52.658078Z","alert_count":0,"request_count":105,"received_data":8855355,"sent_data":47554,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-28T22:11:46.369912Z","alert_count":0,"request_count":9,"received_data":303947,"sent_data":4881,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cs-case.ru","ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-07-02","domain_rank":0,"first_seen":"2016-02-16T15:16:52Z","last_seen":"2025-07-24T15:59:24.44551Z","alert_count":29,"request_count":29,"received_data":2417518,"sent_data":12970,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Liveinternet","description":"","website":"https://liveinternet.ru/rating/","common_platform_enumeration":"","icon":"Liveinternet.png","categories":["Analytics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"InstantCMS","description":"","website":"https://www.instantcms.ru","common_platform_enumeration":"cpe:2.3:a:instantcms:instantcms:*:*:*:*:*:*:*:*","icon":"InstantCMS.png","categories":["CMS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-28T22:11:39.889585Z","alert_count":0,"request_count":2,"received_data":354151,"sent_data":2240,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cs-case.ru/","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"281138f1f6c7c8f3405dd9153f705e5d","sha1":"b2a7c79044f6c0b1f58719556ec89c803d4e1b5d","sha256":"031784209e1569a52abda3b85986641b0978ea7620103d0facdda2f23aa4ffae","sha512":"6b766e431140344601155adc2bfd1e6172a060d5d999def5963e36a441e6ea01ca594ab907028ee77a216b1696955fb73b57fd29bd9201f482686a82fe0e3189","ssdeep":"","tlshash":"2de02d328001148c89c714b3b848804d1909e4181ea467180095083cfcf57aa433f23c","size":306,"data":"","first_seen":"2025-07-24T15:59:37.839432Z","last_seen":"2025-10-05T08:48:57.527275Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/12italy.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/12italy.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 62290\r\ncf-ray: 989ba917eb0f5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=70015\r\ncontent-disposition: inline; filename=\"12italy.webp\"\r\netag: \"7bb1046b246ea5650a16ecc562800c16\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:48 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3206983\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62290,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d26ca48cfb7ea66270ca8d6f9ab9b0dc","sha1":"bb7fc3868eff6662e6f443ace1343132724fa0b9","sha256":"e6a16bef265e7ec5df3e6201903a89bce8b24f93214b083ceed0322a099cd916","sha512":"c2c1e096c73a51a4712ed527e36ada406470ccb3bfd53a577daaf2db6fcca04fcad1ae4fe3e7a03af26dba8dcbfe1bf350682db647e2fe2a779890c5b8ec73d7","ssdeep":"1536:U2/jxGMU3s4ZlnTzqtwqyA7H2xeMBmSJ7:UK9GB3sslnT+uqypPmS7","tlshash":"ff5302960ff940aadc2553852526cb7e1716f218f9bc0931bf3d259e2365a5327c0b2f","first_seen":"2025-07-24T15:59:37.388634Z","last_seen":"2025-10-05T08:48:57.250462Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5351,"timings":{"blocked":5267,"dns":0,"connect":0,"send":0,"wait":45,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cs-case.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 13:02:46 GMT\r\nexpires: Fri, 02 Oct 2026 13:02:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 243940\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-06T06:02:35.311094Z","times_seen":546718,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":8,"receive":1,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/NOSCOPECASE.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/NOSCOPECASE.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 83378\r\ncf-ray: 989ba917dacd5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=88871\r\ncontent-disposition: inline; filename=\"NOSCOPECASE.webp\"\r\netag: \"48e1758d8b12d3647e51ffee1c327672\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:50 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83378,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6fcbc756cc035129db68791c7859c810","sha1":"f7304ac95ffac47a790d8b12b1de76f0bf94518d","sha256":"e1bcb91e023ccbfcd208d25855e56fe655248bd4c925bf3094d4aaa4d3613059","sha512":"6fdf8695ca6c8d008e8a000113693098c0c90a9afe6f370bbb8843d4b784ca0c40bb00eaffa0c7ca2de680af80303866e37c1a561c8ee4ffba96bb0237614796","ssdeep":"1536:J1xXEOolHJCRNTdM4uJf4bPnQ6eyrKAyFGvYRFHXeSYVhOMCjqh4b28NCy+jVrUS:RJ+JCRNhHumznqRAy8v6HpYV4euQyOxX","tlshash":"d4830292f657a672e475125252963823b05f7297327244bcfe172d087be206bccecec5","first_seen":"2025-07-24T15:59:37.241745Z","last_seen":"2025-10-05T08:48:57.256617Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10642,"timings":{"blocked":5284,"dns":5153,"connect":4,"send":0,"wait":37,"receive":10,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/overpascase.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/overpascase.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 83504\r\ncf-ray: 989ba917ead95684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=91336\r\ncontent-disposition: inline; filename=\"overpascase.webp\"\r\netag: \"ccdfcc1e80b14090bd783910f440eea5\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:59 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83504,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab8ba08d1acf1be7d737f8a68631c511","sha1":"f8e45bbd5bdb13c0298c81de3d8b2543e8e4ecc0","sha256":"dea151bc484220e133308a18f6584afc7754f6567245c3a775ace99a59662d6d","sha512":"c3b3c5a39eb919b5ecdb11c04593fcaa84e95695b74c04a9d8a3beca1fe884ec87c372952c8bb19c0e43ed909e08379012d636418ccfc31547d9982225d22871","ssdeep":"1536:7uyiY6S1sc5UmZHqvrJNWOFYVCRjjZjVYwlmOBZqDEaCVSD38NRU7Kd+sB6ZvmHS:qPY647THWrJNWOljjzZj2QHVT8Kd+kuP","tlshash":"928302fec249c0f9f8b841d5b7064a0120e5eee9a1c3975a7af6719b4e8a45f30cd680","first_seen":"2025-07-24T15:59:37.759596Z","last_seen":"2025-10-05T08:48:57.259842Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5349,"timings":{"blocked":5280,"dns":0,"connect":0,"send":0,"wait":59,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeP90.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeP90.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 73768\r\ncf-ray: 989ba917eaf55684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=80921\r\ncontent-disposition: inline; filename=\"caseeP90.webp\"\r\netag: \"177c06158c10fdff88f075c4d1776c8f\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:55 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 2038772\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73768,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"63f47a8e4e38009a3877fba32a2b78a9","sha1":"5afe8c03064e178d000c436c2eae027779121cf5","sha256":"248130a1b573d36395aa294dd2a9b49d873a17c41297e4687144066985547632","sha512":"f6083d39249eb0a5f8cf028987e90130aa9a6d84382ff235eb297af9d152e9ab191a46f56f11ffe8875421991c198dc0577db929a38d583f0bfc9a07d9e69ab0","ssdeep":"1536:z++0GYg+dRIE1LRxCZsotctEZVYlQeRri0QDp7EHx/sR/nFO:zWBg+dR5LRA6ombmeRrnQDClsBnFO","tlshash":"3f7312abcf390f095c960651c0022c6be565dbbb9c90b439a6ee270e8e91c7484727cf","first_seen":"2025-07-24T15:59:37.606042Z","last_seen":"2025-10-05T08:48:57.26294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5331,"timings":{"blocked":5272,"dns":0,"connect":0,"send":0,"wait":33,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/12baggage.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/12baggage.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 66532\r\ncf-ray: 989ba917eb015684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=74033\r\ncontent-disposition: inline; filename=\"12baggage.webp\"\r\netag: \"1ce7a59af30270d46e419f8733eef0c2\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:53 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3704411\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66532,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"88e27cbcb1bb9ef13d350c9b0e5a62db","sha1":"e53f32984ac468a6c204aa4b627c1069bf88204d","sha256":"57958982c88d90e9d1dd00d0d0af437d5c7ec6cc06205706bddc4429fb091385","sha512":"04b35f1341bd718324e52e1ee2bfd283fd48190499ad8d73010ff3ee7a33645aeb39b3a28ef87c4c923c085026daddca5509a19852af07cd53b3d67ceab3435a","ssdeep":"1536:U53xol/uIbP9v6ym6zvUg2LU1yOCFo2q68Nmv4uSIYWflC:sW/uOHzMhA1ynO2T8NXElC","tlshash":"4253026815d1b1693b70f2e8e837998f60f0383acfd86914b153d3a57258b80e755b27","first_seen":"2025-07-24T15:59:37.740481Z","last_seen":"2025-10-05T08:48:57.266376Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5336,"timings":{"blocked":5269,"dns":0,"connect":0,"send":0,"wait":42,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/Case-FD_Red.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/Case-FD_Red.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 93204\r\ncf-ray: 989ba917eb175684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=100747\r\ncontent-disposition: inline; filename=\"Case-FD_Red.webp\"\r\netag: \"6f3366edd4bb8b083d74a139d1d10bb7\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:48 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 2606394\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93204,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"31641f15fdcec105423837649ccf3404","sha1":"a02ecb2eab8ad38dc14fae2401755c7b7faf01e5","sha256":"4270bbd4990daaaef62738706c5e4cf0b66c4b3a278a98fce5e904ab544954af","sha512":"32cf87b706ac36296c6daa526ae37cbb99bc3e98bbf286a2ca427e8872b49e89d1beb043773c933ef73962f84cebfccf60f5728dbf99544bc5ad3899b0c24c7c","ssdeep":"1536:Q+0ETUuQXCspFi66typYxWV0v5953il6Zce+SqOp8H/N9W2pr+i5p2mzw9TRwM:Q+7TWX9AxQVK53i2T+qpQ5prvrmeM","tlshash":"969312106cfc9948da974b123caa75ecee758974093df67f4bff619e881833060e149a","first_seen":"2025-06-22T10:27:53.563065Z","last_seen":"2025-10-05T08:48:57.26963Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5358,"timings":{"blocked":5265,"dns":0,"connect":0,"send":0,"wait":33,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/www/css/swiper-bundle.css","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /www/css/swiper-bundle.css HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:47:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18625\r\ncontent-type: text/css\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":18625,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18624)","md5":"4c87b1fdaceb3db1e7fcba217b90ff60","sha1":"33143aaf101a0a86803893f80ccdbbb4967d6ebf","sha256":"a34f0c96761c9b8f7c6006555d4f744a3762a068ca8070094a51af3a4bb6b454","sha512":"d2106e6cd55cab76f9a32dc481f793018a3675a9a3c64f3b6a4c9ed0af992dace843f3f7b043d5d12e08477ad617a105447080069d3bec0a919e8a02d6aa06ab","ssdeep":"192:BxbmUJbiKneAns3bLrxHfczT7edgZjbCopGndUZxK61JpL/xdVEDG37BVHmLOfWl:B4UbeAnsrFci+ZHSC8enWxfJ1","tlshash":"3b82015913d01823661f4e6a1ff24778eaa444a10b9be47d33c8ad88d3badbc035f5e5","first_seen":"2025-07-24T15:59:37.005105Z","last_seen":"2025-10-05T08:48:57.272727Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/upload/pics/FARMKNIFECASE.png","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /upload/pics/FARMKNIFECASE.png HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:47:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 142906\r\ncontent-type: image/png\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":142906,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 396, 8-bit/color RGBA, non-interlaced","md5":"8cba86181426b86e1255c4591e206288","sha1":"3499115ca52f537ecc623c35e50858c980123525","sha256":"137203a465578d5d7b3244f7942a9bb7550cde2137ee79dd837fb2e1c60c7d34","sha512":"1ecf8baf75b768a3c2ac4a213a1929b770137f1a813813bd225cb90a0bef0a6c18cb503ea0acf9b5a3e018d57786b6644b01b2019a4eda5dc5fe0af7295781f0","ssdeep":"3072:uGIcv6fhA30tGE4JGbWCBBkyvcJmxweLQQR8PSp+OAGsTlRIR:uG2fhAktd4y/B2w84LQQmPSRAGsTlRe","tlshash":"6bd312e771ee0197b8d14a1136deb829d85a1278c728f0dc5a39d9b8f21ab2dd14c3f4","first_seen":"2025-07-24T15:59:37.572095Z","last_seen":"2025-10-05T08:48:57.27539Z","times_seen":2,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeeUMP-45.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeeUMP-45.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 74722\r\ncf-ray: 989ba917eaec5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=82786\r\ncontent-disposition: inline; filename=\"caseeeUMP-45.webp\"\r\netag: \"cb34cef86a7422dcb7ae67a2f50f5977\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:55 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 63395\r\nexpires: Mon, 05 Oct 2026 08:48:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74722,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a5529c69d1b89e17dd79b6885f1d1979","sha1":"6b98602489eabb77eb389d86f74a6df9a6f541ff","sha256":"d90c6f9d47d32ae3009c923c81f32ccea6968ca617d4107b8d16175ac8ddf8d0","sha512":"480568f0b9dd8084aaf22088aad5944c5168a1b040dc7564d5f96448ebfce78d501319eff78d4ca5cda2b395dadf0d174113edc24fe14c807cbc356ce219c1ba","ssdeep":"1536:1nJxFiOKL3EdDhrPs3HSm9u9NU/ucVYuH7n7A74kPPRoaKZxEHckFbpkCzeGg4eo:1n1ivL3EdtmHS+dVZH7n7A74kGaymHcg","tlshash":"6d7312bb7d3ac1d2153bf45985db41218efa8c78e50a6eca1d5db02bfc1c7a43d84609","first_seen":"2025-07-24T15:59:37.464449Z","last_seen":"2025-10-05T08:48:57.278941Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5321,"timings":{"blocked":5273,"dns":0,"connect":0,"send":0,"wait":33,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseGLOCK.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseGLOCK.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 74898\r\ncf-ray: 989ba917eaf65684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=81253\r\ncontent-disposition: inline; filename=\"caseGLOCK.webp\"\r\netag: \"b90faf47efe585402403730c90a018ee\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:52 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 2039087\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74898,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1877bad9bd24d1bc76e345b1a125d86","sha1":"15b562e83df5b7a4d87c2d8495957616ba64c382","sha256":"289b2b202bae4bccb72d70d59ebd60bbb3dc12950f6b777e7c2877d57dd67ce4","sha512":"b1174ff08462ffdfe33167a288dd5e8205a35bc85edf563cfd2b906d2295232a97af86bcf88ac4e487dbc46d71f30154dffa15dd13aab75fb52a739bed3a0101","ssdeep":"1536:8QKvXZt4ZoYjdt1lSp0RF6vN/nYuwn/6XnNTq7AZmr+srR/:wv4ZoYha0RF6vpIn/69TlQH/","tlshash":"4c730173760d1e4e606efdcc2974dc3963b4a065c167b02adf4bb81bb2d948245b13b6","first_seen":"2025-07-24T15:59:37.649266Z","last_seen":"2025-10-05T08:48:57.281783Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5330,"timings":{"blocked":5271,"dns":0,"connect":0,"send":0,"wait":33,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/12aztec.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/12aztec.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 71387\r\ncf-ray: 989ba917eb085684-OSL\r\netag: \"8940213c46e0c223afbb8ae8d63e78bf\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:52 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71387,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 396, 8-bit colormap, non-interlaced","md5":"8940213c46e0c223afbb8ae8d63e78bf","sha1":"e73cf8023f41e34e948775282703ed09a7758529","sha256":"e2bf5b06c493ead27aee749df26bf3a8aa0e70b0916826fc6fa89f477bf47e79","sha512":"9deb531ee09e9953a1303cc44c29bfdba6b2b8405ae5a28404302876bbb22de13edd67588ed9618add9df87d163afc613e4bf28e9fabaade04ae8db0cbb0d9a8","ssdeep":"1536:WBuY6KWTbBzzeyC5kbuQtbQxnf85w/W4eq98xwySAkcs+Q8BsJIDz7:NYipzzeyCSbi8u/W4eq9Jyphs+PseP","tlshash":"5b6302727f9beb080c785b255c4cc9624de1fbf4808a02755d86ee67942b7dc611fe28","first_seen":"2025-10-05T08:48:57.284343Z","last_seen":"2025-10-05T08:48:57.284343Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5456,"timings":{"blocked":5268,"dns":0,"connect":0,"send":0,"wait":187,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/HARDENEDCASE.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/HARDENEDCASE.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 73698\r\ncf-ray: 989ba917eb185684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=80383\r\ncontent-disposition: inline; filename=\"HARDENEDCASE.webp\"\r\netag: \"09dca6fc14505045e9afef5de560b849\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:49 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73698,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"93f8b8002b006c5d285002e2451cb343","sha1":"cb4e698bb773519f53ffb5287d4f0526d7bdd0b1","sha256":"70d28408e55e400206c38aef722e1f2729a461d2c760fc22593d97aaadb95c13","sha512":"ccc0dc1481c11446e35c06a9f6f2f942a6e3d263e7633b7f4d92bee8c06d255dcc1b915672293e0b46819fd063e276a32f0f881b072b97e7f1ac7c811dca6450","ssdeep":"1536:4vC8xDyIoXt7TyDhqShpH+ve8GSM8XCW5kegY4ewsOrAjwsBVJlEZN:mIJ5yV2YSJ5SnCOrsBdeN","tlshash":"6273022dfa20173744b17ac6453cc8693faf958482da5a12cf0d4f166f0faf46f58a82","first_seen":"2025-07-24T15:59:37.094541Z","last_seen":"2025-10-05T08:48:57.286913Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5359,"timings":{"blocked":5265,"dns":0,"connect":0,"send":0,"wait":55,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/boom4.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/boom4.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 88880\r\ncf-ray: 989ba917eadc5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=98137\r\ncontent-disposition: inline; filename=\"boom4.webp\"\r\netag: \"e1df7df17f93281cda36b96288af6270\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:55 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88880,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cfec32c726012ae4ac60ed73559a1813","sha1":"df76d4e82f8625fac238d1a5823b2bb35ed4bc79","sha256":"f914399711167ed5af5826cd3c180a66fce632b16f6f2f0039545d7ff7c1a6c1","sha512":"a366c353d56911bb3cba67e59e7905981b43eec444dab4505c859ee0c9eb3d612d19f28961aa02e43c43418aa3a991a4eb7a875ab6fd0443550822cfc25d6378","ssdeep":"1536:q+85Ls2/prteqcrvv/DWGB+BBVbGf6k3DJtYBPRso62udJNGXAjl6Ogh1IJE:q+8mOrq7Kc+wzUPRMdJNGwgPCJE","tlshash":"db9312a5171563c1911ca8ba9accc1fa2206250f085fd79eca8d3b7557ecfea6421cf3","first_seen":"2025-07-24T15:59:37.333958Z","last_seen":"2025-10-05T08:48:57.289335Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5373,"timings":{"blocked":5279,"dns":0,"connect":0,"send":0,"wait":86,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeM4A4.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeM4A4.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 87878\r\ncf-ray: 989ba917eae55684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=95039\r\ncontent-disposition: inline; filename=\"caseeM4A4.webp\"\r\netag: \"39f237549027c456cd741b775891699d\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:56 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3964609\r\nexpires: Mon, 05 Oct 2026 08:48:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87878,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da94fd3656594b349518ea79415651b3","sha1":"a15abdd35a42787ccd0a6795f7f8130bd1b3a8cf","sha256":"b086d4f248f96cb5c18726c11d6b469d732067e75a1cd2d29dfb751c0cf9d054","sha512":"7e3cd447463606f1ff6e14689c8772fc72458fcc51321fcf9f9e49805e14612c89b21556b19235650eb718dfdbb844bcc4ee58dd26221293c33b694afa166f88","ssdeep":"1536:Y3GoL6KRiyrg+eKsz1v59tZF6KCHITq/+rZE/3UXFmUvtZ8oTWPOnDyP:YBeKRi0szd59iUdr9XvnHiODu","tlshash":"1d831214252574a360c7899dbfd25ffe244279472a4a34793b2663388b2f27c3d0a2dc","first_seen":"2025-07-24T15:59:37.5504Z","last_seen":"2025-10-05T08:48:57.291374Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5323,"timings":{"blocked":5275,"dns":0,"connect":0,"send":0,"wait":33,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeeTEC-9.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeeTEC-9.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 90770\r\ncf-ray: 989ba917eae65684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=96078\r\ncontent-disposition: inline; filename=\"caseeeTEC-9.webp\"\r\netag: \"314770eac0a55b3649df0a0397a42101\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:55 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3944382\r\nexpires: Mon, 05 Oct 2026 08:48:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90770,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a1ae785dc5641ad5a6f79e8043e61fa","sha1":"3f5542630f523225d41707587d6ec814e71e1eef","sha256":"b34ae677eb1b377fd9fea8d644902720488ecfc91f6ad89149cdba482017e71d","sha512":"c4ed51dc507763cde5e6f4f77b71c1c34a85c8324c509f904043c50d5138e8d208a462666d3932a40754c651d45e0b62d4fd7e91f0c7f5bc8ce8d115816f300d","ssdeep":"1536:JtmXQtGsddR/Z1vkJqWS66xUDHTRwrR+pSALO/kha/0Be0IBybxfO:J25sL/Z1vwq6EU3urRwk+GB02","tlshash":"aa9312d5e32b1be97688526deda088bc1eeab4001a93ccd6d2553932f7cc75b40971bc","first_seen":"2025-07-24T15:59:37.347859Z","last_seen":"2025-10-05T08:48:57.293577Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5312,"timings":{"blocked":5275,"dns":0,"connect":0,"send":0,"wait":33,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ptsans/v18/jizaRExUiTo99u79D0aExdGM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/ptsans/v18/jizaRExUiTo99u79D0aExdGM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cs-case.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28548\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:44:05 GMT\r\nexpires: Fri, 02 Oct 2026 12:44:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 245061\r\nlast-modified: Thu, 04 Sep 2025 17:27:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28548,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28548, version 1.0","md5":"f2664d403038a06d248ccadbf5ca7fb5","sha1":"265519710eb7704c474c7802a11aa9a0022a0088","sha256":"f283e584f001db04b39f339e859454a205c431c576c6a33af9259e54415db1bd","sha512":"90b39729053757e43c61aa9a8f3e97a9802a127b96157da826c9dd314c8ad07342c1c9031257d7d1a789a79abf5a2677a3df59052817655ecc72f77cdaa6ee47","ssdeep":"768:DfT6no4OCJ54TQGaXJzWagukNKXsktoF4aqYwcVayDDI4xru+:Df4o4X5pXd0ukQNeOaqYwcEyDdxF","tlshash":"75d2024dc115ad33ca00f9fadde454074b8f741b962703efcbf6080b8a9d1bca599648","first_seen":"2025-09-05T01:58:17.175008Z","last_seen":"2026-08-04T17:36:46.784724Z","times_seen":3545,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":9,"dns":0,"connect":8,"send":0,"wait":28,"receive":2,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/templates/default/img/logo.png","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /templates/default/img/logo.png HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:46:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7276\r\ncontent-type: image/png\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7276,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"a0fec654c3f8f7fac94d55e258c46341","sha1":"a4b14d1d39806727c46a047e4b8b026f39a49b27","sha256":"1596f2bf5ed1f64b47545200bd84dabaf6b18b477ef094f5e698bf436b3478b4","sha512":"b15d2eb24377a64dfea84cc1a0eba70d6e47e173fa02473020d38563dc7ff75e01056119166b0f22c21a9b2cc8f87bd5de5a5d560430964473a0654eba110e8e","ssdeep":"192:hiYA1F3LpWZcdLv3XB9V3OWd8jgIOd4bhjnev7:hiLF3gZepeLjgIOCnm","tlshash":"28e19d0c591037458c9214a747b0113ab4a1239a800bf7eb4442ab7bd836b9db5fdf77","first_seen":"2025-07-24T15:59:37.821437Z","last_seen":"2025-10-05T08:48:57.297341Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/EZCASE.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/EZCASE.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 80644\r\ncf-ray: 989ba9182b645684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=87857\r\ncontent-disposition: inline; filename=\"EZCASE.webp\"\r\netag: \"70da037b8dd0dddfc38ec081587e105e\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:49 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80644,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fb0a59ef4b171062569002a9938ee34b","sha1":"e3bb64ad9ef32917f0e2ad33f6aab619b0b142cf","sha256":"365d4cc0554b389b447b2ae8fe38381bb013557a2898e35c5d5cf5b56a447967","sha512":"8107e3cd2a36833a0cb426ca97265331c015f35e5ec32b48dadcd9afafeaf2e3af45ba111b6b4a7d881e2ba8f475159e039319041a5807461c1314f7cd80a026","ssdeep":"1536:oN+jW1lWlpwbHW4tiBpoP26SoAwlOdL//fI9t2DrQmYm9N2Sp+Vh3nAR0n1P:umXkHW4sBpoLSQqr/WUA8NvWW0l","tlshash":"71730205214ec6f02b7f1a05928f652ab9db3d009c71e651bdbe12e3d78d6c8b3a4895","first_seen":"2025-07-24T15:59:37.260272Z","last_seen":"2025-10-05T08:48:57.299205Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10767,"timings":{"blocked":5333,"dns":5154,"connect":3,"send":0,"wait":48,"receive":26,"ssl":168},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/TERRORIST22.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/TERRORIST22.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 88004\r\ncf-ray: 989ba917dacf5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=95258\r\ncontent-disposition: inline; filename=\"TERRORIST22.webp\"\r\netag: \"0c7f1770339a6615f32ca479520b9368\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:54 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3964728\r\nexpires: Mon, 05 Oct 2026 08:48:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88004,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ade8a71c823e7f8a970333f0ec47676f","sha1":"eb1b7bf3ac7443b361415391e735a16302339925","sha256":"8ae783bb1bd4f4f55c7eb06f55ae41bbd9bc9a17008ec3314550fa1062190420","sha512":"81523b5175c38edb4abe521713fe9a9f2745f60d32d201812b25348dcda175d0618d5536f2c386f405c8926a17c7944b052a69151dad7737c5d3fc3298e0165d","ssdeep":"1536:mZsNNdHF7IsCT0ixe2L3UBsyUaQiGeBWIhMZBVL/DXrSasZhxj4dcOykUnN:mZgNJ1IpfxeRBsyUjq7MZ7LrONhx1Oyh","tlshash":"74831231290d5ec3f739139f1a1e4279ea287987a2a30d161c3256afc7a74d9e4d6cc8","first_seen":"2025-07-24T15:59:37.640421Z","last_seen":"2025-10-05T08:48:57.301026Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5326,"timings":{"blocked":5281,"dns":0,"connect":0,"send":0,"wait":34,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/vaccine.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/vaccine.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 386652\r\ncf-ray: 989ba917eae35684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=484517\r\ncontent-disposition: inline; filename=\"vaccine.webp\"\r\netag: \"d6bf72fc7e336f467983d6027b9346cf\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:55 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386652,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fe4bf84f29cd7303133986cbed1efe4f","sha1":"e1143d3c55d0bc6e79bba4f9bb26fa629528ee4f","sha256":"39f5cc139d4b3d80cc53cd750a08e27a813930c1d5688c5882d1d2e03d557748","sha512":"a5804ee6bba5a65f973da3cf9ae1c9731382607732402e2a63389e689b3ccb57507255a27f2cfaeba42f78332479c981ba2d80051d36badb3ced2d3822f3a50c","ssdeep":"6144:A3sHyjbLbyfwPUaw0t3kT8TbRudKO0N7LTyc63AaBf1WAgO0gZdRQj/qSb4sh:LyjHRjmT8TFQ0N75635BfoAgO1W7qSbj","tlshash":"c48423030b7909361bcb3f846ea4425b169b637e0a7da593575fbd0b2670c27b8b13d1","first_seen":"2025-07-24T15:59:37.826115Z","last_seen":"2025-10-05T08:48:57.302929Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5377,"timings":{"blocked":5275,"dns":0,"connect":0,"send":0,"wait":46,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeeMAC-10.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeeMAC-10.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 81208\r\ncf-ray: 989ba917eaf25684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=89348\r\ncontent-disposition: inline; filename=\"caseeeMAC-10.webp\"\r\netag: \"f63bfa48a7fa1e54b6da93d3070c9c7b\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:55 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3940147\r\nexpires: Mon, 05 Oct 2026 08:48:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81208,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"886973b0137fcdc14c27bcd162517ded","sha1":"7dd74c97644958c4ff35a71e2f3594e42fb3740e","sha256":"9a25b7ba5a9566b4b0ca6456fe6a8dcb342cec9c6a67f0936c91283583a0bc48","sha512":"fc059ff4dedfef8d7a35182a6c7f7fa14eb1bc59411edfb028f53c1c4a499477d7b2400ef6d61719f82c3235992cc5ba217f258e1b205604dac474d5fea52b27","ssdeep":"1536:OW10W19M1wgDgaAvMb02lZkDX20iYKkgg6vCfQWq/w9LT3i9h6k:rL19BgD5RjkDXpiYXgg6vC4RoHS9ok","tlshash":"328302ef96a396f15028ddc23ccc611a94c55aaa0781b6cbd3c04a8f5789ca744fd4ef","first_seen":"2025-07-24T15:59:37.476572Z","last_seen":"2025-10-05T08:48:57.304768Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5328,"timings":{"blocked":5272,"dns":0,"connect":0,"send":0,"wait":33,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeMAG-7.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeMAG-7.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 74554\r\ncf-ray: 989ba917eaf45684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=82133\r\ncontent-disposition: inline; filename=\"caseeMAG-7.webp\"\r\netag: \"f322f4bff7e871723f735c7413244867\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:54 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3962692\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74554,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8e5a70908c0aa0d76980d959585010e3","sha1":"ed5ed9db68b75c70d4e6fd6df271eada0b0dcc43","sha256":"0d366dd4f4029019aa20328efa05056ecf45dae43cda4e991b5d03ae66c4dda5","sha512":"adb6abcc0ef4cb25c44df274dc8babe26918f934a55bb60c46fd3e2e47bc685cd278510416e34e7bb9747fe9df1235568a9930322c8a2925fa74fbbe110b9056","ssdeep":"1536:irfsxh0S4DtWvZ7DSjfDlNXjRLJbvKMZvsK1q1+pSSCp0kHSUqFNDjKINat:irf0mS57DS7DPpJG0dq1+w9SJFRKPt","tlshash":"847312cc0d2c2b07ca99996563b37bf9cc1115a64ff8f258bb10b1da04b10fa7de9259","first_seen":"2025-07-24T15:59:37.674119Z","last_seen":"2025-10-05T08:48:57.306685Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5330,"timings":{"blocked":5272,"dns":0,"connect":0,"send":0,"wait":42,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/12havoc.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/12havoc.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42550\r\ncf-ray: 989ba917eb065684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=49072\r\ncontent-disposition: inline; filename=\"12havoc.webp\"\r\netag: \"66d8b8ee9eba974b006237bfa8b8aa28\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:52 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3206982\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42550,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d61b0a7b578d01d6f6c17df07b59472a","sha1":"d82fcdea7c0ff6bbaa090c637074193a2a02dd0e","sha256":"03aa45ffd34374f69c320744e5045fd0e2efc38edf3a0550eb5f3302bea97e7c","sha512":"181397b564b5f1e9c14f4fc11389325daeeb3fde716306b0b9a573944dfcf9790932e00e77fcb9c022fa588f1a922722a3d6ab43f2131b2419f5dcf412e7d512","ssdeep":"768:TFbw4u++X7aycKeK4W0CvWCCi/DfMNeWJ8jMFxV+CzBLMnEsiOAgXzly6Iq:esycRWjvTXMpJkMF/+C9kELOAgxOq","tlshash":"3e1302406251f150f0fcf3bef6daa39def3262776b10859d5a8fc06504a4a68f939d24","first_seen":"2025-07-24T15:59:37.610483Z","last_seen":"2025-10-05T08:48:57.308865Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5335,"timings":{"blocked":5268,"dns":0,"connect":0,"send":0,"wait":46,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/12bank.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/12bank.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 52336\r\ncf-ray: 989ba917eb0e5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=59072\r\ncontent-disposition: inline; filename=\"12bank.webp\"\r\netag: \"b1339358ccd9a208c4913f0e85ef4ce3\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:52 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3206982\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52336,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"12237ea02b64a4ca7b3cf485cec44ce3","sha1":"d02073b88192d7b00434ee0c6384c8cfd9e8b8ad","sha256":"42e342b73f0ba9a12a52501a74d77f9f6cc223eebb8e4e361146e16297f02a93","sha512":"8a1d963e3545503293181d86cc8c3160491ff57786d4abfa815ec933a4c7fe99addec38c10836c9e17959802babac702e151ef34e14dc5d4a2a80b6fa6bded61","ssdeep":"1536:Ui9PScpij4vdawxqJH42/4Ot7V606kOKRCkeJfsDq:tPNdvJqJY2/1tJ606dKoZfGq","tlshash":"17330251124ac20ef8352c449609334f9106e2bf9ad3b6e86a7cbde34bded64761f079","first_seen":"2025-07-24T15:59:37.267448Z","last_seen":"2025-10-05T08:48:57.311876Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5337,"timings":{"blocked":5267,"dns":0,"connect":0,"send":0,"wait":33,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/CHEATER22.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/CHEATER22.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 70072\r\ncf-ray: 989ba917dad05684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=79972\r\ncontent-disposition: inline; filename=\"CHEATER22.webp\"\r\netag: \"e8822b381d5e085cf6814055bbe57e9c\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:57 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3207066\r\nexpires: Mon, 05 Oct 2026 08:48:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70072,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d8be0f7cc1868008d9c7f3c184082126","sha1":"f04a43ac55c62a5bc1dd2e0e6e5ae75d1d65918d","sha256":"6f56ac6747ff26ce48a3ed3bd5fe8bfd58c294ff1042fd9bc4bb022c81cbb511","sha512":"f2d8e143388483c7135c9a698cfe8ff29628eed8f8615470aa568e8d818488b067724f1a9beb5b52fc8c6eccf98dc1ca3125610177794a91636e5fc57a3613be","ssdeep":"1536:QOrCmrnYU/7nxRl+HOUts2JoT7dDbhIybKDTjMNR+/uYZMQ:9CmrnjFRl+u2s2qTFbhIBjMnMhz","tlshash":"3c6302947343160429a4e3f1d3b379b42e01402595b370a3e9fe5fe5ee925cd709bcaa","first_seen":"2025-07-24T15:59:37.314702Z","last_seen":"2025-10-05T08:48:57.313841Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5323,"timings":{"blocked":5281,"dns":0,"connect":0,"send":0,"wait":33,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseDUALBERETTAS.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseDUALBERETTAS.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 65462\r\ncf-ray: 989ba917eae95684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=73045\r\ncontent-disposition: inline; filename=\"caseDUALBERETTAS.webp\"\r\netag: \"b51ac215c7b3034456f0250021709bb8\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:51 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 63396\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65462,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"85f5ee753568566ac1b38ffba88a44c2","sha1":"2108d4d052bdafbdd22b488f4ed9e430c411d5f7","sha256":"2d3db64f5359cbc46b359fa54d22697e0b228dfdfd07f92cbc80a1cfe9914599","sha512":"2bab7381a887445404f54ea56cde0dd343e09601244e21ce469cd84610a5ec471eee63b29067814a551112a3e806a3b8d9157b4fb6d78fcd18bb73c41becd26d","ssdeep":"1536:2RgfzE5io2KkFdLmMEP8w5BSUgg5mbHV1WSyPexANerxPOiimF:9zE5io2KkFdLtSeK0b17seSNR4","tlshash":"7c530207e0b9c6bced42882e61dad5a3c0eced19d022a2273d13df5eec647395a7191c","first_seen":"2025-07-24T15:59:37.554536Z","last_seen":"2025-10-05T08:48:57.315493Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5324,"timings":{"blocked":5274,"dns":0,"connect":0,"send":0,"wait":39,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeSawed-Off.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeSawed-Off.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 88092\r\ncf-ray: 989ba917eaeb5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=94997\r\ncontent-disposition: inline; filename=\"caseeSawed-Off.webp\"\r\netag: \"ee92728bdfcc0d7784c591617b6aa314\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:55 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 2072297\r\nexpires: Mon, 05 Oct 2026 08:48:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"40caf2776cca22af9b589ac682a81873","sha1":"19ce75eeb5ee403b38cd71a462d620e187cc8412","sha256":"7867c106f4300065b301fde6f7f74ffef6824cea2d4a9636b9b111efb432985f","sha512":"0543b28a5ddec22b8ca55860ea6c1b5f41d3b57ab5f8b1c61f84488d05364a51f2b118d21d674138182e3bd5fb3c9606cd223296938907299c60d1bd37ab2a9a","ssdeep":"1536:Jvrz9/B1Zd4d5L6tEYbPKkmWJv02ETzQ0dXmd15qcHQHmPfZwFxqdXBvCML6wm7:pNZJ4PL6tdw2ETMjvHQHmPOW2MLm","tlshash":"b3831205bdbed3237d237d93d68114126dac972d7e41ac85303b684ffa1528a232a1f7","first_seen":"2025-07-24T15:59:37.630105Z","last_seen":"2025-10-05T08:48:57.317541Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5323,"timings":{"blocked":5273,"dns":0,"connect":0,"send":0,"wait":33,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/sourcecasee.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/sourcecasee.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 86728\r\ncf-ray: 989ba917eb105684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=99203\r\ncontent-disposition: inline; filename=\"sourcecasee.webp\"\r\netag: \"b50bcaba7b46f568d3e6e6a6dfef6131\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:57 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86728,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0090cf67d2032835b327141169bc38a8","sha1":"5398797483c35671c74982b8930e02a1ae9bc03c","sha256":"2427b50c68383c984f865d95d1ed675c6de5e850a2af0d0de5bfb90633720840","sha512":"a9649ad00e126da8dd3cdb6e3fc75a9c3aae4d1f5d6b79f23b6c84f0a0ac4f13abb7b309827d6da43f016e4c368a7050ed12e7f2993a4056c6fe1abf2f1f7aac","ssdeep":"1536:CliqcyTqjwMRUfUclNU7ixykhb6iShNfcwNHTvPiwZtTXjMn:YFTqjw2xaiiTQiSHUSzvPiwYn","tlshash":"e7831289ecc013f53a88cec0aad6a2586e7910caf944c3bf1d7c4d7124edd559383ae4","first_seen":"2025-07-24T15:59:37.524446Z","last_seen":"2025-10-05T08:48:57.319219Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5352,"timings":{"blocked":5266,"dns":0,"connect":0,"send":0,"wait":57,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeSports2014Summer.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeSports2014Summer.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 51710\r\ncf-ray: 989ba917eb2a5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=56326\r\ncontent-disposition: inline; filename=\"caseeSports2014Summer.webp\"\r\netag: \"9440fda951a168478da4242fe1a12384\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:55 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 687432\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51710,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86c2a34cd38407f7a3666e727c6c654f","sha1":"9e641632eab4d8ab8ba5c9e366c17cfd4939b567","sha256":"5bd5f653fc2d5dd36e2532b24ce6833587a4a26cc5f75f6f612affd2b4302f5d","sha512":"b63a25288b516127c0013cf362ee4307ea5102182a999f43e752c8c3fec055b8071bc71b4faa518f6f2584c1760541da50900d7e768151f372128e5fdb545b9b","ssdeep":"1536:roi7ef1H1kD/AXBgFxqtTlgX4xQQkE94LK:roi7efZ1kDkgqtarQkI4LK","tlshash":"1c3302b20c2bce5dad2c055a61779d7442bbc48f96765ce2cb0e9a837b582eb0770370","first_seen":"2025-07-24T15:59:37.196659Z","last_seen":"2025-10-05T08:48:57.321418Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5366,"timings":{"blocked":5260,"dns":0,"connect":0,"send":0,"wait":53,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bebas+Neue\u0026family=Inter+Tight:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Inter:wght@300;400;500;600\u0026family=Montserrat:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800\u0026family=Outfit:wght@300;400;500;600;700;800\u0026family=PT+Sans\u0026family=Roboto+Condensed:wght@700\u0026family=Roboto+Slab:wght@400;500;600;700;800\u0026family=Roboto:ital,wght@0,400;0,500;0,700;1,400;1,500;1,700\u0026family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700\u0026family=STIX+Two+Text:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026family=Ubuntu:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css2?family=Bebas+Neue\u0026family=Inter+Tight:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Inter:wght@300;400;500;600\u0026family=Montserrat:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800\u0026family=Outfit:wght@300;400;500;600;700;800\u0026family=PT+Sans\u0026family=Roboto+Condensed:wght@700\u0026family=Roboto+Slab:wght@400;500;600;700;800\u0026family=Roboto:ital,wght@0,400;0,500;0,700;1,400;1,500;1,700\u0026family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700\u0026family=STIX+Two+Text:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026family=Ubuntu:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 05 Oct 2025 08:48:26 GMT\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":184716,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"39595bd20d3685a4c9cdcbf06e7e1492","sha1":"189f965428b4c512fa052429445e9248cedcc2cd","sha256":"646288e577aebd4f39ce8b94582ba5f84cedeca4a6991cba6fea011db205e854","sha512":"8dbb623c91e741058e01c8cebc8ccff1f25860ae570259ee8e2674b643d2f38f4afe31d384faac7e54dafbe25cab3d5c41ba3d7278340b1240b40d0d325e1c08","ssdeep":"768:4rZKbla/LVlN0SRklh/Uu+zeoHOlX/+EU9JKBLfhQE8YtCR6UfaQ7zfTYHw+fQQa:P7/XiaQ","tlshash":"30040c91042ba540eb871cc233cf7e36ee4e62657084c579abfd1d99acebc22136875d","first_seen":"2025-10-05T08:48:57.323015Z","last_seen":"2025-10-05T08:48:57.323015Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":9,"send":0,"wait":25,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/www/img/connection-bg.webp","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /www/img/connection-bg.webp HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/www/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:47:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43096\r\ncontent-type: image/webp\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":43096,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a5d9bccf0c048bf06cdc70a7b2c99ebf","sha1":"01e359c6f0eeba94c285ac7e2b61b02422c82a6f","sha256":"8c86806a652c921584fd0fa6487fbdb84fd2f386f6d1e71eaf2c570d3ac99f9e","sha512":"df17df782900e3a5ba1903b56bb1b8b1ccc8690e3985c91de7faf43f1c8c88df78a0f904ddfcaef6c4fbe9c04dc02ecd37f422c71d83001a1c61d8e9ea52da03","ssdeep":"768:u0fqJsstjWMp2FAj0VqzGzXrd6N/2AKsGV5zGzJnJ75lqk8VWQ5AnrvSLikvTVsF:pylj3p2kZ27Oe2JJCkOD52Ss","tlshash":"f013f1e8cc1d6247ce32e220d597cd644c748513e35e7376e289c27753e9507a91ee4b","first_seen":"2025-07-24T15:59:37.146741Z","last_seen":"2025-10-05T08:48:57.325097Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cs-case.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 13:02:46 GMT\r\nexpires: Fri, 02 Oct 2026 13:02:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 243940\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-06T06:02:35.311094Z","times_seen":546718,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":9,"receive":9,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/VAC.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/VAC.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 87048\r\ncf-ray: 989ba917dad45684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=95302\r\ncontent-disposition: inline; filename=\"VAC.webp\"\r\netag: \"cc4a267ff0c839f4a72928f727c4f31e\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:55 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87048,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8c3122fbbf96ee456487d074fc76da8a","sha1":"988e99141afaf6ac7ef526db433206ed5eab62d6","sha256":"167ffca29fde171db8ae8e24a171af74b18c1f0cea10c93b983bb666482a7e42","sha512":"dfee828821809bf04b0ec5c3a01423bbf6df8e8082e67a700198636419d8dea24e1b8af3957880aad54dd62fa46fa19eddfaef7973495af9f74a8fa8d3fdbe75","ssdeep":"1536:cBqTzazTrfWi1i/UiuBDC2j1zwZx1V7VAq6Fe1dGJvS9tmD0Qx14IuBe:ye0TrfWi1EUiuVCKBwZrV7VIMIvgs0G5","tlshash":"6c8312dac4686ce5cfba5c3ad560c263c43d46bfbaef512e6995ff418c438046a6210f","first_seen":"2025-07-24T15:59:37.395085Z","last_seen":"2025-10-05T08:48:57.326725Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5330,"timings":{"blocked":5281,"dns":0,"connect":0,"send":0,"wait":39,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeCS20.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeCS20.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 69190\r\ncf-ray: 989ba917eb2e5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=74963\r\ncontent-disposition: inline; filename=\"caseeCS20.webp\"\r\netag: \"97ac3c8de0d6088472734c2662683f19\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:53 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3934183\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"72d5d6d8f6ded5d85630168092206b2b","sha1":"73bfa2a6f8a39e61fcfdafff77315f708c1561c1","sha256":"8c790f15ad9dc69b289feae1875555de533054c697085a1345ba828cf06afe45","sha512":"a9c7993e170352b0f3f36dec619a90181347f10e420ba4d5806c7c34c5b6f7106ec7c86bcfda70b15ed7dd3777a6d6c0175036557021c992a7e4c832f51332dc","ssdeep":"1536:Phnbmy+p61jrLsm5BBnxHcOJe7g7eUsN8Ukvc6CBDGcCh0CBne:ZZxLs8p8ONeUsN8Hc6CBDGTe","tlshash":"e6630206f1c29eb735321422202bceab62d82157fdc545af5cc2a254f4da4d3f65ea6c","first_seen":"2025-07-24T15:59:37.274417Z","last_seen":"2025-10-05T08:48:57.328348Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5368,"timings":{"blocked":5260,"dns":0,"connect":0,"send":0,"wait":52,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cs-case.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:58:18 GMT\r\nexpires: Fri, 02 Oct 2026 12:58:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 244208\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23776,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-08-06T06:29:32.428671Z","times_seen":9347,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":8,"receive":1,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseDangerZone.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseDangerZone.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59386\r\ncf-ray: 989ba917eb235684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=66341\r\ncontent-disposition: inline; filename=\"caseDangerZone.webp\"\r\netag: \"cd9086c4faa4a0c5e2fd80aa9a49ea0b\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:51 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 2045108\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59386,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1bfec8695328cececb17821af094b861","sha1":"70da3922be1735f0f5aaf4cb73fab54bf8d6e027","sha256":"a3b62af8a2a50a4a1b4a0a88e406369923c85c25046511b04007dfafa2659d6d","sha512":"8d5054c0f4ca55e121fe2b6dfe371a0b4237f1f6c5859f1d9823f15bddcf99c1d5e3901c855a89cc8d412a680538a15989b6070862d9e95097ea0e36a14df2ff","ssdeep":"1536:LiestJNiWl5W1WvF+P5fI4LQr5vpVy2HJC+wTdcM2eMyzsjK:evwWbW0yAfDMcM2a4m","tlshash":"7843020d317db6cf0eaa1c5f2becde8c2a591a5f2bc4a4384495e600c06601e9adff57","first_seen":"2025-07-24T15:59:37.541525Z","last_seen":"2025-10-05T08:48:57.331451Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5364,"timings":{"blocked":5262,"dns":0,"connect":0,"send":0,"wait":35,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/www/css/style.css","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /www/css/style.css HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 01 Apr 2024 15:59:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28950\r\ncontent-type: text/css\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":28950,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (756)","md5":"925bf1f51c075d8813aa6d7c0ad19cd7","sha1":"ffa88f60e3f41df0ef976f7df2f265c9c3c89280","sha256":"441f4ddaff9eab5282fb7f9e9820f9645e24737aeb8403c66188d23a1970a328","sha512":"6f4c65ac736cfe05d988aef1bc57de25c2baffdfcc27082f756745c1a9de892159523ced8c81ab3e9cabf6bbc155ea84709f05b4c83e258eefa9aee09c10d646","ssdeep":"384:8uN9pgPTukbhlMRgf47uWEINdSZLdQ1lgxucRPMWCK01Rf7JKL6HR7BKuyKUDQ7Z:/pgPTukbrBg7uWXwMKLmBKgt","tlshash":"b7d22f1b26043c09e22fb495bca16f72732ea943725f25b596c5980cc2ce236d6777cd","first_seen":"2025-07-24T15:59:37.5081Z","last_seen":"2025-10-05T08:48:57.333349Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/summerrrrr.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/summerrrrr.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 296884\r\ncf-ray: 989ba917ead85684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=406429\r\ncontent-disposition: inline; filename=\"summerrrrr.webp\"\r\netag: \"bdc1cc27d837d86558b83282f7691a33\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:57 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":296884,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d65c53868b2ee0af159fccdc38b47d23","sha1":"8966d3a5ae822726b14a9890ca68c0d9f14cc150","sha256":"1e8324cadb489aac2bfb2b30fdd1324408344e8605634c445bdb0156860ee266","sha512":"e194ef90699faaabb7982da85a3de1b83b17731c8a512a1f87d8f0b8b082a69deccc8aabbcf1667164767240e6e84fd650a6c9f6db13977267fe3992c83231e0","ssdeep":"6144:hH+jwTQHfLOVGa9jkOL7N9sIZ1qu5DMjepm75AHWDQNlQZKaUh:hIwTQHfdIg+ku5Iq8SHkQNlg2","tlshash":"985423e197739a7b40a47363f1429dbae1f81604fc7bbd78c0b4c6b64c5c865a8217a3","first_seen":"2025-07-24T15:59:37.416713Z","last_seen":"2025-10-05T08:48:57.334961Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5363,"timings":{"blocked":5280,"dns":0,"connect":0,"send":0,"wait":37,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/valffq.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/valffq.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 69810\r\ncf-ray: 989ba917eada5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=74959\r\ncontent-disposition: inline; filename=\"valffq.webp\"\r\netag: \"6b994f5912e97fdfc56efa434821bd87\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:56 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69810,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3b01db416f1b86bb42d97af4a6019062","sha1":"35a250e34bc5127fd7520331eefd43bae3667419","sha256":"c0faadbe117b44d1687154737a7707a8a03b6f782fc3c96d84323c169d9e6cfa","sha512":"aa0d05d92ee700536b23c719089e57dddb88f66886f70dd24e59b6b0a035c3ad10d240b65d8bf02694b5eb3034447ab691091150e412ec8911272a2c19d4c580","ssdeep":"1536:/wMlA+bwsdlewBYn+P+eOW3Aqz/FRuYBLiPIgMsDx73AeN:BAyPdlGn6D3A2XBLigc7wQ","tlshash":"136302cc415612b69c6aecb69f1ee2e02d6b3a80853b17dbbec7109459c5fc728d0c97","first_seen":"2025-07-24T15:59:37.696656Z","last_seen":"2025-10-05T08:48:57.336704Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5339,"timings":{"blocked":5280,"dns":0,"connect":0,"send":0,"wait":51,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseak-47.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseak-47.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 80858\r\ncf-ray: 989ba917eaed5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=90031\r\ncontent-disposition: inline; filename=\"caseak-47.webp\"\r\netag: \"dd82e8152a5a21a1f326ef53176fb0e1\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:53 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 2939051\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80858,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3d0b7c1077c4c36015b71e92d8e1ce42","sha1":"62c5c69827afbc12c2f5bdc40e57f8c3ef1d19ab","sha256":"51e75c7b57343529869df3b2198ac598d343782082243a0fc6e9935bf4a63356","sha512":"3ab8c3922e7ae76533efa91ab5c9d2d3d0480c4c11768219e0e4013976ca7a7f027d902b7bb4c6e0a5f585c9f71d8cfe17957457bff3c90296112cd0dfaae235","ssdeep":"1536:I/l6C0dSnaTd/XuSSzFHx0TComufLYxBQooVUBFspssrZYVaq1DR3z0D3AQrROPu:I/fISyJfSH0T7NEZCULspfrOogj0Tfr3","tlshash":"3b830214619f69bfa3ee9dfead281f8df627254733d2e800981d214d8f395c0a5307a6","first_seen":"2025-07-11T02:15:54.679531Z","last_seen":"2025-10-30T20:25:14.002212Z","times_seen":5,"resource_available":false,"data":null}},"time_used":5323,"timings":{"blocked":5273,"dns":0,"connect":0,"send":0,"wait":34,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseGALILAR.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseGALILAR.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 80352\r\ncf-ray: 989ba917eaf15684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=88371\r\ncontent-disposition: inline; filename=\"caseGALILAR.webp\"\r\netag: \"aa9f52f8160311bf9b8fbae156e09f01\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:51 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 2038771\r\nexpires: Mon, 05 Oct 2026 08:48:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80352,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4d91677d54888fa98145d120525e9dcd","sha1":"404520e4b51ffbe6deb12f877e428f31a735e8f7","sha256":"af6f48e054d394a286cb0ff9c885e6b32a2d480cf016c77f7b30845775a63125","sha512":"2b06bb817d0e4fd13e05aca11da08e19af29ba4c299cd30dc05c1cede93c01b25b94e363da981fd60ae8819075b20755177fe25427f341642274a21eb8838695","ssdeep":"1536:OdtyOoxlQQ2NoWqGBogtPzVyE8LlIajzQFz0u93+Iqoik:INoYtNYGWgJV/8LlIOzQ6Y3+3oik","tlshash":"ff7312c0e58239ecbe30cd078ca8356f9de3af0dde856945b7123811f194a7a2052fe5","first_seen":"2025-07-24T15:59:37.782023Z","last_seen":"2025-10-05T08:48:57.341897Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5327,"timings":{"blocked":5273,"dns":0,"connect":0,"send":0,"wait":33,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/BrokenFangcase.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/BrokenFangcase.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 73196\r\ncf-ray: 989ba917eb3a5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=79115\r\ncontent-disposition: inline; filename=\"BrokenFangcase.webp\"\r\netag: \"cb4519f08658863b256289b51ffefd44\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:56 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 2038768\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73196,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a5f26d804d3023b1cc5dc8ff427bd33","sha1":"9d69857cb33bb4f2779b5a09655ad5a6b3f8a203","sha256":"7f5e7b92f1bedbcd66eb93079369c90b42a9f470b45cc782e47de9863c9629a9","sha512":"6e2a37954643aa9214d8bafda613215914d563b48dc60775031593a31c2089d2b8c3d03ee026c32a319f28bc313e4dce6fed812faf92d361cba36a348c2bb956","ssdeep":"1536:7j0jfEzWw13U9z/NemkK7UdbCxW0UoqieQ92hb1hJzF6IRI7C5yHHbesknD:2fw1Iz/NeY7bKQsb3Jxu7CseskD","tlshash":"6763017b1644e7286154aed2d32a7ce4c38d76137401c35bfac3ab3e8ab3943a697416","first_seen":"2025-07-24T15:59:37.040296Z","last_seen":"2025-10-05T08:48:57.344815Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5368,"timings":{"blocked":5258,"dns":0,"connect":0,"send":0,"wait":55,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cs-case.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:58:18 GMT\r\nexpires: Fri, 02 Oct 2026 12:58:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 244208\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23776,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-08-06T06:29:32.428671Z","times_seen":9347,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/upload/pics/free_case_lvl3_512x396.png","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /upload/pics/free_case_lvl3_512x396.png HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:47:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 146322\r\ncontent-type: image/png\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":146322,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 396, 8-bit/color RGBA, non-interlaced","md5":"498ac4ba7fb5919c2083c0a2c980651d","sha1":"88c41da8a5b505efe89504d49ea69c972aab09df","sha256":"5327a26727931a4467053910f00964a0377408c1132f63dc757eed91ddd1528d","sha512":"28e828278390529649b92c29ffcbe21dc199f35228d389aa0704f243161884d0d7f08d5f86d92fbe77c3612938231e22d65fcc72ba24e15cced7a6d22500f309","ssdeep":"3072:ktaAYkfvXP/KW5mENV776vP8oDzufd03fruMieHknNPMHcoZhUfIv:qaAYmvP/KW77mNnuuzBqNPWYfIv","tlshash":"7ae312979b1a2da2c12deb5e0a99613fc417b9e2b9505911c2300d1fe3fab69091ef70","first_seen":"2025-07-24T15:59:37.123754Z","last_seen":"2025-10-05T08:48:57.347856Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/TikTok.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/TikTok.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 87968\r\ncf-ray: 989ba917eadf5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=95403\r\ncontent-disposition: inline; filename=\"TikTok.webp\"\r\netag: \"f8ed9e9e6bea83080b7aba575abb5efd\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:54 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 701928\r\nexpires: Mon, 05 Oct 2026 08:48:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87968,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"31fff84f903f755f0364fd727fd39d70","sha1":"62607ab34136770e1c43d49b9fa0a4576195c376","sha256":"b5252573cce8a5aaba9e46dca007fe627a1996190e9a7936791650ab6972e1ff","sha512":"4c77e22a23a0a0cc8ab01f2eef59e17c694f373ec4c6812476748ffdcae76ccb444dd850ae85783b7bda9eba9f27cd25bd53e17b8091ca8ade31afd73ec6d3fc","ssdeep":"1536:e0aNMHnv8vfuiwSjD8NS6J0m7wFgqtK3OBJ4n36MRh8isU0b8fy9KpuFEFG:eWUvfusgNS6JB7q4OJ436MRt0g693","tlshash":"b0831263de927d93edc0284533d324b9d9e8783e6cf749cbd2a62d415ac006b385e5e2","first_seen":"2025-07-24T15:59:37.644936Z","last_seen":"2025-10-05T08:48:57.351232Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5324,"timings":{"blocked":5279,"dns":0,"connect":0,"send":0,"wait":32,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeP2000.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeP2000.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 75842\r\ncf-ray: 989ba917eaea5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=84455\r\ncontent-disposition: inline; filename=\"caseeP2000.webp\"\r\netag: \"943f175178eef3f9eaf6e80f0acd59df\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:54 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 684606\r\nexpires: Mon, 05 Oct 2026 08:48:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75842,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"721ccfb608e6264c4dbc2ae50a2ce88d","sha1":"f172e1dabb2f26ca37a70c1a485765d2361d708f","sha256":"93825e73759c3c1caf7c60a407b7eb9052fa357ac83d6065f5738012e033e40f","sha512":"b9341fb97fa58cd8d9c7728d04441afd53c25aee0b7e320e89bed742066282076b760118d580a44cb0a6ff9711a50aee177821bdbd8a07bbfe4f37424e85f94e","ssdeep":"1536:P93/9/bgZZrbKyX8ni0rLLcDvwCWfisOQzYKzIfPYLkwYEF28q2/jGSRjgn:f8HKQyi+LLcWfhOUrMfPiv3K2/jGejgn","tlshash":"41731260c5a363e00d36df87f676bd0836187204edfd3806255b863aa83205e9ff5e96","first_seen":"2025-07-24T15:59:37.29415Z","last_seen":"2025-10-05T08:48:57.354114Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5321,"timings":{"blocked":5274,"dns":0,"connect":0,"send":0,"wait":33,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeMP7.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeMP7.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 78048\r\ncf-ray: 989ba917eaf35684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=85655\r\ncontent-disposition: inline; filename=\"caseeMP7.webp\"\r\netag: \"ee7f5e9a9a4d3dddc673a85990b12505\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:53 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 63396\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78048,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7fd25bdb03f1390ea4970509abf0d1cb","sha1":"bb02a74cfb66cbe1fafe2ee95fb2855cd7d42793","sha256":"04d979923104078aee1ad71498e2ee0de6015870b9752859922096d5843f42b5","sha512":"48b750777daaf938d6774404782d800ae6b404781809aa5808f843b0090689ac8d48e755b478b3b8f0220d2ee78d6b0e3d469767362d09f5035988b25e5b7c4c","ssdeep":"1536:l5X6QNTlwYMUeBQeD00o30iYWGD9IXDc70oLE7Tf2qIb6cLz0Vem:fH5wYMUePdo1DG6QaTf2qIb6c30Ym","tlshash":"4873020d07d8888d26ae82ba904f64c4d5b6319de6266c98dc525bbcf71f4af4f106cf","first_seen":"2025-07-24T15:59:37.731836Z","last_seen":"2025-10-05T08:48:57.356723Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5329,"timings":{"blocked":5272,"dns":0,"connect":0,"send":0,"wait":34,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/bobmbcsfd.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/bobmbcsfd.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 92878\r\ncf-ray: 989ba917eb155684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=100977\r\ncontent-disposition: inline; filename=\"bobmbcsfd.webp\"\r\netag: \"bb0644e90418cc28eeaa1767da526ac3\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:55 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92878,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ce7902f3fdbb26b2d05b124072a2063b","sha1":"a62d78a911e63f01704466d3ac246bac4b7a0f96","sha256":"d5d720e3a99632f654b71c904f65ea64f31f91b694001ad9035217adea5f44e2","sha512":"4a8c2be53d488de22429a7f2da46eb67a13fcb0dcf077d2ef267fb3589b9b90e17090267da68fc3a57f9be7c31b7fde252be3741dea51c78428a009b0b836bba","ssdeep":"1536:SIL2KeXEC+/LsVH5RE6YTDWeni7eRH01TBSuCL/Mdklca8GsyUSR/+Ggm+ph:S25FIG3ViaS1TBSuCL0za8f5k3gJn","tlshash":"2f9302515b501a70c482314baea1eae1af6bb7dc6af807dbed2c437285dc527374a0cd","first_seen":"2025-07-24T15:59:37.529824Z","last_seen":"2025-10-05T08:48:57.359408Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5353,"timings":{"blocked":5266,"dns":0,"connect":0,"send":0,"wait":55,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/VIPCASE.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/VIPCASE.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 101218\r\ncf-ray: 989ba917eb1b5684-OSL\r\netag: \"8ea441025b901a32171f00ee063295f3\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:56 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101218,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 396, 8-bit colormap, non-interlaced","md5":"8ea441025b901a32171f00ee063295f3","sha1":"00a7710a02abd25973180336917fb12fa1f037a9","sha256":"d53c3f3a7e2350407a878c2553005f9fcde1a915b9a8853268c05fc9611bf6cb","sha512":"828b32e2c75bb3155e2d3a8e6a29164a832a3e3da9d830659b207883c5ad25f9c8538dbb42d8853a593784ee0355918f1418a2c0a5f908568e4512171067b276","ssdeep":"1536:qsvnjypMEG6wFAbIuvIWfBh3zE9dQAWp5kTAQ/jyZSDTGIXMSaKLSlfrxYynkFUN:qsvnjfEG6PzIW74lWHtZSD1wKelzeEr","tlshash":"5ea302f7ebd6e7ed13010ebb035e224ef8a85cc7905576e1e9068b1442e649a3dc271e","first_seen":"2025-10-05T08:48:57.362477Z","last_seen":"2025-10-05T08:48:57.362477Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5575,"timings":{"blocked":5264,"dns":0,"connect":0,"send":0,"wait":309,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseFracture.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseFracture.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 54996\r\ncf-ray: 989ba917eb355684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=61755\r\ncontent-disposition: inline; filename=\"caseFracture.webp\"\r\netag: \"98faf802a9ac3698e5e57a18257229c1\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:52 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3206981\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54996,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d4680d5be740bd47d34e3ef5c72a1c7","sha1":"9838a603a69fb41820405172f98020eccbfa810c","sha256":"28f83c81d00dec738dacab799efbb1979e8e018e76e3f3c16eb9d52d67f4bcaa","sha512":"794571948bac2c626db516870c1182e0607032cf4b1c1a0c31baf3c296e26b8450270fd469520382ca9f54fb8285bccde2e97bd305f726287fac5c1b6ac939e3","ssdeep":"1536:+2LCdp5X81n57jQJqI0UcB46E6SlZvddpr3UXz4wrH:+H9X81nSJLgB4pZvddpYXUwrH","tlshash":"c033011dad63a47e2253c484bc4aed49b4db0ef93e9016d813ded096d943cf1ca82f29","first_seen":"2025-07-24T15:59:37.352023Z","last_seen":"2025-10-05T08:48:57.365139Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5366,"timings":{"blocked":5259,"dns":0,"connect":0,"send":0,"wait":52,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/upload/pics/free_case_lvl1_512x396.png","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /upload/pics/free_case_lvl1_512x396.png HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:47:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 141701\r\ncontent-type: image/png\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":141701,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 396, 8-bit/color RGBA, non-interlaced","md5":"6c8618492d6ec4480c327d84e8188dad","sha1":"df5c5c76bb7bf33daf0960fa7ab2f28e5dc8cb99","sha256":"8d91381fc906c7aa9b05799a1f2724bb53949773fd7a72c85593c555a32e313a","sha512":"12c569a2ddab1583b3249b24fa2d1a5f2e319ed3a5d7be8529ad4be735e9325a120dc1cc62611f0b4c746637a33e28d53cf4a82904748018a48467da29ab05e9","ssdeep":"3072:Bg1xHLVIKAJYun2BdZNR87EgrwLpHcGiGoSLaGhNr1/h:BWHLVGYun2BE7KHWGRawB/h","tlshash":"f2d31300bbdc7c2a57a8d4de63c15d413ea264e826787c3e2316d5e8d90e68fe9234dd","first_seen":"2025-07-24T15:59:37.716905Z","last_seen":"2025-10-05T08:48:57.368458Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseDESERTEAGLE.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseDESERTEAGLE.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 82044\r\ncf-ray: 989ba917eaee5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=88817\r\ncontent-disposition: inline; filename=\"caseDESERTEAGLE.webp\"\r\netag: \"73620cbf095cda2fa0344f90dd7e767a\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:49 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3206980\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82044,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2f6b3da24cd76286fd0712ecb7be8a34","sha1":"00660728fd6220d0783d342216fdba632815f281","sha256":"6088b96ca0128784b5cd31c472e731bf6451f567de0e74e6793df0362c193895","sha512":"15b0b9648d61eab74354e1df5e5a125e01a5fb70f7662734ab437a0d698f41cfd546c85762e63775a7e16f4125c15527c101bac7856291575c22a8f7a74fa6bf","ssdeep":"1536:kUL65iUgnwOJYGKQy7/TjDvG0x6W0kGRyPet4oa0+u72fWoe4go:zL60Ugjy7T/0NRyGt4oa0dOWon","tlshash":"438312e8a174f2d772894f0ed5b4acbca099c6c740dbe45c12252b16bc09dc936e9e16","first_seen":"2025-06-22T10:27:53.410369Z","last_seen":"2025-10-05T08:48:57.371228Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5324,"timings":{"blocked":5273,"dns":0,"connect":0,"send":0,"wait":33,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/12alpha.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/12alpha.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50920\r\ncf-ray: 989ba917eafe5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=57875\r\ncontent-disposition: inline; filename=\"12alpha.webp\"\r\netag: \"3775e85d88146eab7c31e4adedb1342f\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:52 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 251871\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50920,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec377a9ca219b9535ca4efe98be3bd70","sha1":"b8e155068ef8a6f0c3a23c2aeadf7d9fb1ede121","sha256":"8379d51b29cdeabf52aabf6df95e864406315130679a0123d7a109e8610a6fe2","sha512":"afeb6b8f0dc503ff67efe2eb5b62b754bef2e5f047e90209d5eb92faed5ba4c24e5fa06a64b0c20c137e94dd7920ecb2f272973ddacb557df001774f53cdbb21","ssdeep":"1536:M/ldp9x6srho+hJxwjMa+E2e3NqPTE/fRr:Mhj6srfYnt3NqYfRr","tlshash":"3533f11f7c94eabd118bbc16afe02618154a1b17dbcb6722125f5cb04efb8669052c8f","first_seen":"2025-07-24T15:59:37.449821Z","last_seen":"2025-10-05T08:48:57.373774Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5331,"timings":{"blocked":5269,"dns":0,"connect":0,"send":0,"wait":33,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeRiptide.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeRiptide.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 67180\r\ncf-ray: 989ba917eb1f5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=72246\r\ncontent-disposition: inline; filename=\"caseeRiptide.webp\"\r\netag: \"3f0efe4a907c0921f389f6b3f33581b5\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:54 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3206981\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67180,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b21d5915545ebc78dc73828b5a47015e","sha1":"371c7b879aa8a44f92d1f55c2957739debd8f6f7","sha256":"f3d130c10cd697742b6a3b5374c2a1c583e3479402fcc36c1c857aafb521dd82","sha512":"c20f7128c0d8dc995cb029831b1c3f0150735aa3a1c38ef0e04784aeaad580cf908e5308c568808493480e41e3d03d73d212514e5cf54e3659fce4827bece05c","ssdeep":"1536:XlkPkO+CCWKRC0cqExAFXntnRsXHhmUIdA1h7UA:6+p3Rj9XnnkG6hj","tlshash":"176302a69ecef476c7e3263728af01d7d02c4f289d360a295472a38a4194bb74c4b621","first_seen":"2025-07-24T15:59:37.797949Z","last_seen":"2025-10-05T08:48:57.376107Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5365,"timings":{"blocked":5264,"dns":0,"connect":0,"send":0,"wait":35,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseePrisma.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseePrisma.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 46828\r\ncf-ray: 989ba917eb385684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=52459\r\ncontent-disposition: inline; filename=\"caseePrisma.webp\"\r\netag: \"42e68676385ad750584839a22451792b\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:54 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3206981\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46828,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10eedea04db7047a59ee13d34dea697a","sha1":"44a515b73201998a443772f2c6c15571a7bf0082","sha256":"d1d6274addb25d05ba6b85cec34244d6751b3a4fbe33726f64610c8765cbee28","sha512":"ba8a9d0818ffed931ddc6ddf27636efc43fa37cf686b82cc6f839ac47e81302bfab1817d725a15d337c10ebb79c54b6a5201d67c1ff93b3d27e096c7a8599934","ssdeep":"768:FpXpwI1iXe5FJ79oePhzfOC226I8QxyEry61fDtRZHZsuPBsIwgi5FG8FrtplTwD:FZWgiXe5Fl9oIWCZaqry61fTZHZskPwK","tlshash":"a62302c6aea7403ad93e8d0371976db39d62cf9bf50f420a05d2cbd1ae5c3047191b46","first_seen":"2025-07-24T15:59:37.499879Z","last_seen":"2025-10-05T08:48:57.377958Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5367,"timings":{"blocked":5258,"dns":0,"connect":0,"send":0,"wait":51,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/templates/default/css/theme-layout.css@1672654961.css","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /templates/default/css/theme-layout.css@1672654961.css HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:46:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 0\r\ncontent-type: text/css\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T06:01:13.311428Z","times_seen":17737942,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/templates/default/css/theme-gui.css@1672654961.css","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /templates/default/css/theme-gui.css@1672654961.css HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:46:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 58800\r\ncontent-type: text/css\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":58800,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"703263a120f2772b062816f4826d1d97","sha1":"cb56a8db978debd199137be147e62eb8c2e32b6f","sha256":"401f20811f51142b4a5c88478a46cada7460bf1f773d30cb5f6160f9bca65b72","sha512":"4bca6d0cf88316049e9dde5451033e84757cfcda256ebdec535673ab471c7f7cdc53f9f75a8e80a651536239352bf9fd9908ea066257ea4245fd4584b4056b14","ssdeep":"1536:z299qNbeEppCkVasP94YO1KIkS61bz1rohb9:tcEpPPaUSwI","tlshash":"f043415296f3094a7507e15a7faee346332d8113890edd6e7b99712cdf85f8880b3b48","first_seen":"2025-07-24T15:59:37.073548Z","last_seen":"2025-10-05T08:48:57.383724Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/12st-marc.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/12st-marc.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 64082\r\ncf-ray: 989ba917eb025684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=70463\r\ncontent-disposition: inline; filename=\"12st-marc.webp\"\r\netag: \"08ad55f4b5e356b0aa401ee18d9c4e41\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:49 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3206983\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64082,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"81e81c9003c1df52984c782b8a1df2dd","sha1":"9b859e3bd70ecc356dd5dd65092a35b323d49d58","sha256":"d0e442f55cb14d657e3aadd204fa1dc464432acd71a7cfec3fc5600ac76fcaa9","sha512":"dcabe5e039fd8260c68866f8899fdaaa66fcd463108b3da87b4f0a84285ad6eb579cfd500267d41a5dde69158632021804907c9e727185c909a29c5aecc930e2","ssdeep":"1536:AsX6a8F2djyKgIryEa7j791gmXPluh3qPwXUCESiIoApWN:AmR1OK9Ra7jjFMh3qIcHIoApc","tlshash":"1f5302f38d395c6165a78a1287e643d3245af92015a32de3babb103150c87f9fdd5f18","first_seen":"2025-07-24T15:59:37.653704Z","last_seen":"2025-10-05T08:48:57.385701Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5337,"timings":{"blocked":5269,"dns":0,"connect":0,"send":0,"wait":34,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/cscase-2.jpg","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /cscase-2.jpg HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 25 Feb 2024 11:41:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19593\r\ncontent-type: image/jpeg\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19593,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 510x510, components 3","md5":"67c5674bd5f175965d4349836a36a653","sha1":"a66b3bc02603be5bfc68ec59db6fa84ae00885bd","sha256":"8258ee63f42802b436c87dd37d3765b9fa1dbd19a298d9f97d025f2d4d7e084c","sha512":"71613adf30f68c97c71853bfdb725bb442b7aaec652a5feaf954eeea87272849a29d7587c94b5deedf07d36cd57a9e2178a85566c80eae93f666991e1c0c1585","ssdeep":"384:ZulR590ipTsJU0Z+rYiN/pibFwN+Kb6xHD3cLfX:klR59nNnki/ipwGj3cj","tlshash":"0b92d01c493215d7f38ae56a04803a14fb42da7e8fa8d74b7b8435081bad3f5793ea21","first_seen":"2025-07-24T15:59:37.362313Z","last_seen":"2025-10-05T08:48:57.387222Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ptsans/v18/jizaRExUiTo99u79D0KExQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/ptsans/v18/jizaRExUiTo99u79D0KExQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cs-case.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:42:23 GMT\r\nexpires: Fri, 02 Oct 2026 12:42:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 245163\r\nlast-modified: Thu, 04 Sep 2025 17:27:33 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45532, version 1.0","md5":"3f66ddcf744f9d3144a164781c1c8d12","sha1":"a922c0987319ee73a9645918566d35cb90196b3d","sha256":"2dea6190c113af617923c6b71f7f10ffbdf72074556f79963610254fe40e49be","sha512":"ab44f6e75fdef3596d5aad958e14b1b2bedd4132aebe0b136b8f4ae466d2594a68baa1c4dd047e70ac03116dda521934e13445e85ef0f2d56bd341c46d116d86","ssdeep":"768:fYn3iesPbiNr4ew9DQrVPgxlpWLCbyByd2YVi15T85aavJWo0xB6tkKCEg9sJ29:AnSbbzsfuYXYU38MYJWo0xB6yKCEg2Ju","tlshash":"b613f174e6421cb77b86260a76dcfa805c77486536fc2a27baffc02b52ca02045995bd","first_seen":"2025-09-05T01:58:17.133494Z","last_seen":"2026-08-06T06:09:19.66013Z","times_seen":19293,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":22,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/cbblest.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/cbblest.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 95440\r\ncf-ray: 989ba917eae25684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=102345\r\ncontent-disposition: inline; filename=\"cbblest.webp\"\r\netag: \"cf79769bc95ce45c870256f45fc4a835\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:58 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95440,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a02c8e8f57ddea6e00d83daade9dcabe","sha1":"64ae346089a35ddfd9832b30d595f61f9ac49590","sha256":"f15260e103f50d4faf604cdb150da6d920b34bee4726f9e864dbdaaa09bf36b7","sha512":"188b7d96bf419e7131491931d1e71dd1abae10800d793bbb948354f9239c130bbd648cc3d7e68ad94c8637b614e9bc207d02b4bcfeafd7219af0d6fc62003fcf","ssdeep":"1536:pDzl1ol+/phiDHYInCHYtP/vNQpKu0e4HDePRKlOdsz6NO07yBLnJO4Q4/N3npwq:p9ml+/fMYIrXvyhMlOdsmtyBLJg4/Rp3","tlshash":"cc9312280985eb5c78c11a543ae94f8eb779da2bb3df967236c3dc8771268b41d30027","first_seen":"2025-07-24T15:59:37.454159Z","last_seen":"2025-10-05T08:48:57.38933Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5336,"timings":{"blocked":5276,"dns":0,"connect":0,"send":0,"wait":48,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/camocase.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/camocase.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 84198\r\ncf-ray: 989ba917eb195684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=92503\r\ncontent-disposition: inline; filename=\"camocase.webp\"\r\netag: \"48e2bc16361276a1f39896a0d0f96783\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:57 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84198,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9e5d9db68f6d303a0343a7db0fb59494","sha1":"22a07cd30f4ad03db1e93948daebc32029352459","sha256":"5e172d04def4282364d05e428e4d814fe787e856066190e001757e4a4c1f252a","sha512":"fc3a3c79dfd06691111ceb26ebfce37f070d4e7a44e96b97727d2fc8024143bd485c2a952fbd92705b7418dc970d9319ace2e45506860b970044fe624fffa196","ssdeep":"1536:tqlRENAlKOhAnTB+kPwzemsDrCdRROwkrjQD6c+j+x6AiBAgfLJL:N3OhY+jzeavkXo6lj7nSGh","tlshash":"e483022d8dcc86d698ff67f0c98518898b1e75562218fc5088564716cdccaea94bd2f3","first_seen":"2025-07-24T15:59:37.682179Z","last_seen":"2025-10-05T08:48:57.391095Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5363,"timings":{"blocked":5265,"dns":0,"connect":0,"send":0,"wait":52,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/jackpotcase.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/jackpotcase.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 67694\r\ncf-ray: 989ba917eb1d5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=74795\r\ncontent-disposition: inline; filename=\"jackpotcase.webp\"\r\netag: \"1a99872f71695bc25e299c176f1af21d\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:54 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67694,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cb75079fdfca79fc2a002a4dfe22428a","sha1":"c55658048b0bac531594061ace5f5d4a33b094a9","sha256":"85ef218645d1591c5403484f68f3a5cd72ace0fb8fb87eaeb44f825b1d387e89","sha512":"334566b8809ea96df1a6fb94da5933dae182e3830a591d700391bfca7ceef3473605cf8d49517406ab10b0ceb5569515d37f78e43bf3ef6ffb7ed5d398db854b","ssdeep":"1536:GmS6XCKI86o26rFYGij60dXIKrC27T0OmXVwj0AN4:GmQw6o2qYjj602BgT0OmF+0Aa","tlshash":"d86302feb404ceeba2e59549c12e98387dc911df25fd501bf236104eba88e01a5f4b65","first_seen":"2025-07-24T15:59:37.519743Z","last_seen":"2025-10-05T08:48:57.39266Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5362,"timings":{"blocked":5264,"dns":0,"connect":0,"send":0,"wait":53,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/upload/pics/FARMM4A4CASE.png","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /upload/pics/FARMM4A4CASE.png HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:46:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 183584\r\ncontent-type: image/png\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":183584,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 396, 8-bit/color RGBA, non-interlaced","md5":"fffae82eb1c5c9e02c2976613217c6b1","sha1":"8778ad7f0071b7cb4d6a75845573f5c9e9cf0627","sha256":"193b0c7a25ba2f21bdbc5937469d3b027abb264e5e2618ac55cab41643c5047d","sha512":"a4be3a6584fd88d0012cbe59a80d8f7c71eacfa2fc83eb8d8ca2b44d5ce9cc9d4daeb6ff8cec527ff9ba4c24a6fcf6d0d9d828895258d3658fb8ce6f02a22391","ssdeep":"3072:xMvCYNUgLCC7wMP9rGU5SyAMU/jAV8z+F7NH4qy7hfZ+yEgxK7p9d3sDk:wH2d25lrt8z+l9BgJjEgu36Dk","tlshash":"41041213f3bd4aedd8d0108275bba927b5817109fd845a10047dc0a6f2ea4ea697ecb9","first_seen":"2025-07-24T15:59:37.790533Z","last_seen":"2025-10-05T08:48:57.394031Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeeSpectrum.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeeSpectrum.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 64510\r\ncf-ray: 989ba917eb225684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=70183\r\ncontent-disposition: inline; filename=\"caseeeSpectrum.webp\"\r\netag: \"29e7c290851daa758c9e5f015a1cc6ba\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:56 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3206981\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64510,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"13d02ec3e5bc525ed6a4fbe1f04d256c","sha1":"587169395c36fd8bfc008d907b73ff5275c72eff","sha256":"4a83cb1b42750c267bded1817410964e2eb6f62c2d139473f0218364629369bc","sha512":"726b7f6f58435b5808c58bb6d7fd5d8aed94f4a793f684adaa0b51bba674ba3dd7439c0e3f1346f088bd5ca119ee10d91c866a3c03831852a8b81a6fb96ee10e","ssdeep":"1536:UZ6hpVGHMe1Tl2CC2DoYP5Ud4ZTJr9gHXfRDfGFcfZ:C6XYHpLUEoYPd3ZmRDfzZ","tlshash":"495302392fccd064bdd8fb67465966ccc0adc6836c202264a6a55360f979def1acc38d","first_seen":"2025-07-24T15:59:37.490809Z","last_seen":"2025-10-05T08:48:57.396015Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5365,"timings":{"blocked":5263,"dns":0,"connect":0,"send":0,"wait":51,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/NEWBIE22.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/NEWBIE22.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 72040\r\ncf-ray: 989ba9181b505684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=78675\r\ncontent-disposition: inline; filename=\"NEWBIE22.webp\"\r\netag: \"2456f60faa2b728c655e51bac258e594\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:50 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3965002\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72040,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d30a9d5fa83f8dc2b01adcfc94bb148e","sha1":"370653a70f89f30a63f9f6233ed68f00d84bc014","sha256":"94926ba005ec1c0641ecb821cdb96ed143b82533d59498914d04f9133ff9dc12","sha512":"41349372457c82022310c9f57f033362cf6157a89c5bf70a2f47fb72cccf0df5a40a3778102a9f8c71ce123da9261f98581df4f29eaebb166c916cbc7b19957b","ssdeep":"1536:orSzO/GXFCYexkjBFZDQnEi7tG/guK4ztYUHkMon1zst58:or9G18mjBFZDQnEiBI9K4GR+8","tlshash":"1f6302c08e56cf189dbff3dad00f2f62dd51d56efe666a0397a173cada950c500a0a48","first_seen":"2025-07-24T15:59:37.66491Z","last_seen":"2025-10-05T08:48:57.397614Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10749,"timings":{"blocked":5319,"dns":5152,"connect":4,"send":0,"wait":23,"receive":60,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/miragecase.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/miragecase.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 100031\r\ncf-ray: 989ba917eadb5684-OSL\r\netag: \"4628ec8db8bc1b4e09f4a84432ee408c\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:56 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100031,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 396, 8-bit colormap, non-interlaced","md5":"4628ec8db8bc1b4e09f4a84432ee408c","sha1":"b6d3860eb8d2989b31fdf7b0b37bb35a36e7497b","sha256":"e359a4612a2de0d48199782e0d5a9be69e7219036c30ebc3f55432242878514e","sha512":"e302f02771783b0a0a50dbc3fda55ce95aecbecd09fdd5bee2d555b1a8458ed8f65deabcd3039dfda6d3cfd25396f549538a25a84654ed9f402a29d451ad2381","ssdeep":"1536:3t+5DADS9WV/+ZrfytqNCquP8fQoUHB1u0W/cujk2DLam9mauLVTq2I:0xOS9/Zrf0qMMIoUTzWfHDLXcauL5I","tlshash":"b3a312b229006da8a85f75d24ebb1b02ca79597cf2c10d688c5333e9da1f9717cb0417","first_seen":"2025-10-05T08:48:57.399122Z","last_seen":"2025-10-05T08:48:57.399122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5495,"timings":{"blocked":5279,"dns":0,"connect":0,"send":0,"wait":215,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeM4A1-S.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeM4A1-S.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 81962\r\ncf-ray: 989ba917eaf85684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=90860\r\ncontent-disposition: inline; filename=\"caseeM4A1-S.webp\"\r\netag: \"840bb6a96dce7be436f2cdf4f1e8914d\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:54 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3968950\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81962,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f89be8f4e2f98142ce0810d59771d4d8","sha1":"345a1b1feae7a2c6a90aa281abfd020a053abe8e","sha256":"a3e03022e5e1db3eb2e12bc064a35c55cab1492cddd237a5cf8c7c059b24584c","sha512":"e4746aa4ba924c649c222e5a66eab08f4590a0c0c98aef214753ac2b760bb901b01b6fe2abb4504581d0ad57ab4b1f7121eee265bddabdf2ffc630dbbe313c7b","ssdeep":"1536:XccsMaOBBLq73fWRfuzvBlAEYuErbem4R6apMA3ck5eD1sPRI:McLBcTeWzfAAErym0sk5eD1EI","tlshash":"a48302d6f35b8334dade65c7af26f075a10c4a0f8366c9a986343a054db0b96042fedd","first_seen":"2025-06-22T10:27:53.360118Z","last_seen":"2025-11-26T15:55:36.060483Z","times_seen":5,"resource_available":false,"data":null}},"time_used":5331,"timings":{"blocked":5270,"dns":0,"connect":0,"send":0,"wait":35,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/COWBOYCASE.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/COWBOYCASE.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 93146\r\ncf-ray: 989ba917eb1c5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=100958\r\ncontent-disposition: inline; filename=\"COWBOYCASE.webp\"\r\netag: \"8a526364696ee6865ea48ff37a18cb94\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:57 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93146,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"265e58f4e05232cedcd8154aaa911acd","sha1":"1bca23251f55134b2b0461f0b3071c0961b1e53f","sha256":"83b6e287eef164d737d004e402cc10137faf8df24f8f60b2b258977753e44607","sha512":"2ab2730c77210f1d49f9031d2fe8b03bc1c8fe6b6c52717a98f787936812a03395b482a57b9f6a7e3f9155ee3dfbd2756843ce5eb3c521ac04d0784899ae58e2","ssdeep":"1536:+W9t6chCurxrkHRqCCSeZNLIfSVQ5SC4DJ2bRyDuBpCNfIg7G5BQ2dnr7QUupUGU:+WL6chCuhkHRpeZNUV5G2ba2pGfI+X2b","tlshash":"8993024fa9261601cf233a9fc262d703387d52f4b9b53d9da48427954af2f2058897df","first_seen":"2025-07-24T15:59:37.749067Z","last_seen":"2025-10-05T08:48:57.401306Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5365,"timings":{"blocked":5264,"dns":0,"connect":0,"send":0,"wait":52,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeShadow.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeShadow.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59496\r\ncf-ray: 989ba917eb295684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=65285\r\ncontent-disposition: inline; filename=\"caseeShadow.webp\"\r\netag: \"e9e8454d25c4411058d0a2be26f159cf\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:55 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3984967\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59496,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"89c8d99b36c1386cbb715c2be5083780","sha1":"3c4cb91f6abb5188791d3cf40daf026e23a66ed0","sha256":"89a23aabb8cd21eaf068f9d723252f03aff7755367478c7f87291267b110ed79","sha512":"d9f615824bd81fca41da18bbb78e99f7971dbf40a14469bc8a827e9f7e38ab69845aafaaee4c646d5653fe7ce515cdf90a59d6a328e39b27cb1a05d82cee2850","ssdeep":"1536:vEoB7hEzCgMqtpioI6Y0ZU102O0H2o0I6HtXX:jayqtqu0r0I6NXX","tlshash":"014302d8f10592ee88eb2ccbae25c4963b2e64d33c75e0dd938e185953f8e145b0f615","first_seen":"2025-07-24T15:59:37.019031Z","last_seen":"2025-10-05T08:48:57.402839Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5366,"timings":{"blocked":5261,"dns":0,"connect":0,"send":0,"wait":46,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cs-case.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 13:02:46 GMT\r\nexpires: Fri, 02 Oct 2026 13:02:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 243940\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-06T06:02:35.311094Z","times_seen":546718,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":12,"receive":1,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/upload/pics/free_case_lvl4_512x396.png","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /upload/pics/free_case_lvl4_512x396.png HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:47:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 136010\r\ncontent-type: image/png\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":136010,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 396, 8-bit/color RGBA, non-interlaced","md5":"31bd2b13f188fd5898046cf02f3bd6cb","sha1":"2d46071ed536db225264b9f07cf50c563ba127d5","sha256":"ffebd5032bcef6ddf4fd17a40e71ce02b95173bc43950b4b69e582665067a666","sha512":"a816e20498d32f718f51475925a5c555e9550edf9dc11657915fc7e88f01d576e5413f440db1db8a23256b3f08812e141253393588ac2154819660239e08641d","ssdeep":"3072:WXUKZMdwHTrGqodwU8t+A0Mb25Z6wILh82GjdEaG4F224v:WkKZpHfGqodwp+2m4Lq2GjdE9Om","tlshash":"90d312c3b10934aa4645def8a92bfeeb349b4593cf00a44265788859f4ddf6b53a33d0","first_seen":"2025-07-24T15:59:37.514944Z","last_seen":"2025-10-05T08:48:57.404315Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/pokasmall.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/pokasmall.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 95758\r\ncf-ray: 989ba917eb3f5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=110548\r\ncontent-disposition: inline; filename=\"pokasmall.webp\"\r\netag: \"8af767ceb681c64d66da9dd5f90f6e65\"\r\nlast-modified: Wed, 18 Sep 2024 16:44:00 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95758,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"431472b24b79d38e79078d6e72967300","sha1":"d03c9a4e01d553ce34fe9e1a213586c44c3acdb5","sha256":"61e7b8506d5f7424f6ed259a3664918701691038482c688b15447b1861189e3e","sha512":"937330d817720c45212d94325fd8cd626d60f5349662251fec2d29a6923ff1ed1b8c9857d91651d6d224ef44ca3172a462d60568c5ad15b36ee380ad4b8c598c","ssdeep":"1536:jQV4E7K0kULkiL9ZjYSKs/5n7NmBqPdBIPkACrxPpMIQP9sOeC+fwK4bOV0qusmE:jGLfYSKgmGdel+pXQJejwK4bHqLmZxPk","tlshash":"5d931216365125af602839e9bf7ad7b15a938b70a2fc840d7d2bc0ac7730e9349b5371","first_seen":"2025-07-24T15:59:37.503093Z","last_seen":"2025-10-05T08:48:57.405689Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5371,"timings":{"blocked":5257,"dns":0,"connect":0,"send":0,"wait":59,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/templates/default/img/vk.svg","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /templates/default/img/vk.svg HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:46:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 942\r\ncontent-type: image/svg+xml\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":942,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5d15ed3856de74f78adaf8ec34505b52","sha1":"e7945d293121bd14f5e16365681d3fb9b6a94128","sha256":"fa8d5c99bcf18ea9f935aed7d47d658f94494ded6f05a41d4e68e7ec75cea54f","sha512":"9486cc2e57927539964bcf250e0cec53556ffa60ba3c9e7cf853c96b2aa412678f975a5f92a9576d78d633bf021d7e19f87c1dac908ec632901ce70a566e300e","ssdeep":"","tlshash":"d61110f8b15c53fce5088b854b6670b9206a36f21302c83d51c1bf1aac8d50f2e996c9","first_seen":"2025-07-24T15:59:37.439018Z","last_seen":"2025-10-05T08:48:57.407103Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/telegram.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/telegram.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 85610\r\ncf-ray: 989ba917dad35684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=94721\r\ncontent-disposition: inline; filename=\"telegram.webp\"\r\netag: \"692282fc4e91efbaf05d8f2127499ec0\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:59 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85610,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cd80dfa95634d66d04f353561043d4e8","sha1":"0dae8ef776bf4789857a3b463744786380ec523b","sha256":"7faa4553594ee5b5b8e881ce74297d6131aebed19615dd930c178b0a846fabb6","sha512":"f14d3e305756e246443fa025eecdd83bb443976698d27d84fe985dc26017ec21e9904859211e50cb11003b772d814398a6680a7f5997e454c85a0d3cddc5dc8b","ssdeep":"1536:kYOjzgDEe2XrkW1Uky+nYv44qrFxQxVc3Ickdr1T/N/9Rd5ZK9m6CLH:ciEe2XIkyKyqr8xVcKrRF7d/K9u","tlshash":"c68302d6f74ae1ba3b410d2941cb02107f145147a9f1ffbb22b1fe286a52685d84cb7b","first_seen":"2025-07-24T15:59:37.375426Z","last_seen":"2025-10-05T08:48:57.408482Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5366,"timings":{"blocked":5281,"dns":0,"connect":0,"send":0,"wait":63,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/twitter.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/twitter.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 70234\r\ncf-ray: 989ba917eae05684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=78302\r\ncontent-disposition: inline; filename=\"twitter.webp\"\r\netag: \"26c240d8352aa436d97583cfcd9dfcea\"\r\nlast-modified: Wed, 18 Sep 2024 16:44:00 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70234,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"52821d3642ec686f2c934fb3e2b8cbe7","sha1":"b21bafe0b9ab8e82479bcaf45277e7bf0b433173","sha256":"9ee3e41ac22b5d2db9e2ba9768e4d70d42c3eab0dfbd7a53b49bec8d8ef61154","sha512":"d152446f8e630af1a1e030877ba1c24544497db1ed8c6a222fc3728cde58b6263984b3d231aaadee59f7dab0170ce973895b142f1e047e87ebae7e6f88bd7b61","ssdeep":"1536:bWioZEl44mAq48Y/CXxj7lhkifOv4MY/HnSLWh1CpDNHUI8ZlZkma:Ki9i4mAq48Y/c3NI4MOHSSWpDlU5u/","tlshash":"926302428be737a83e6ed66ee7907855c7d388d67461353b03164a1e5bc31f02bd023a","first_seen":"2025-07-24T15:59:37.424453Z","last_seen":"2025-10-05T08:48:57.410394Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5326,"timings":{"blocked":5276,"dns":0,"connect":0,"send":0,"wait":39,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/apple-touch-icon.png","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:32.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 13 Oct 2023 03:06:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5270\r\ncontent-type: image/png\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5270,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"a4ca074cb22d12e4e21a26fd0d69d827","sha1":"0b3f027be2f554eb8328e74bf7f43238df153512","sha256":"e0117c05ef64b469da6fd551896306bc5006a1f2ac01cf1b8103dd29acf34530","sha512":"b02e1ec5ee8e9ea9b8d5182ccf54ae44ffad744e71219aff4491634a1093405905d5f3abd38546d153648bc40a7fec992c79da93784b0ffced19ae4b0180c834","ssdeep":"96:WS0rzCcskZKPzcd3TCjzd+muPNxM9f2adt+pXc9LnKiVLs/DiTIm/e//pUso:WSNgKk5muPoMaUMZ1Izm/a/2R","tlshash":"feb19defc43c8b6b28648e67ca72412d469a2f4d30d2c528a212bd58618df978df13f0","first_seen":"2025-07-24T15:59:37.115485Z","last_seen":"2025-10-05T08:48:57.413644Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":30,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/vertigo-old.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/vertigo-old.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 61508\r\ncf-ray: 989ba917eb0b5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=68013\r\ncontent-disposition: inline; filename=\"vertigo-old.webp\"\r\netag: \"cf72444d183a9c2f0cd3d407ebb5ebaa\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:58 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 687123\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61508,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e03b3aa5526a18d086fa76b216500bb9","sha1":"7ef012bd599fa3a96611ef773a7966b808df2115","sha256":"854feb6007755154973e38725772596fffc1ccb8429edac7d3d1205984fc4bca","sha512":"26045d22b93eaa36f4363920f0e0c1fa3686916f728347a161114b07be8c63f79811cb0c279b070f57db57f4e1200f1ac5f84aff8f4baae4ff3c16c04d98bdfb","ssdeep":"1536:5aZfX/vY8YA9ZtZWZiNe5ZS4IK5zb48RGl5r0ZZwzzE:5aZfXoNAztcZgWZS4IK5zb4i+r0B","tlshash":"465302861e6e8414e57dbc20098df21a540909ba7451836ff88390b23b76fb378fe5dd","first_seen":"2025-07-24T15:59:37.586356Z","last_seen":"2025-10-05T08:48:57.420808Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5337,"timings":{"blocked":5267,"dns":0,"connect":0,"send":0,"wait":38,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeeWildfire.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeeWildfire.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 74114\r\ncf-ray: 989ba917eb2f5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=80340\r\ncontent-disposition: inline; filename=\"caseeeWildfire.webp\"\r\netag: \"173bb5f1e01393d0d49948c71e339d0c\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:57 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 2038767\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74114,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0f6f158b5322d11c31110b7ea0360c94","sha1":"adddf2d52483ee94d85543a584d293440548ca2b","sha256":"3d06ed284d448b1d4f6f47b2d972645d1bd943d8be9fd006aa6802298240a471","sha512":"b560a3c0f214a0c56cf87f1736c6bad9f104a467f3b319c3094e260048090d9609f849395f6d6cca43e4a224386d77893b815b5c5c326e43b8be8e38145543b9","ssdeep":"1536:7UycHcTC64BNm2qn9etIDnKUFmDfDkhGRgJwXKEF7t3BQqvf:AVNdq9eUKUEQr8KWf","tlshash":"4f7302570ec1bacc53cd9a279935a029696600b1b09150efccf999d53e8e67eb3920fc","first_seen":"2025-07-11T02:15:54.565219Z","last_seen":"2025-10-05T08:48:57.422596Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5367,"timings":{"blocked":5259,"dns":0,"connect":0,"send":0,"wait":44,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/ivanlogansmall.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/ivanlogansmall.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 89560\r\ncf-ray: 989ba917eb455684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=103483\r\ncontent-disposition: inline; filename=\"ivanlogansmall.webp\"\r\netag: \"1d03fb44297612fba73dcb666626673a\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:53 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89560,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"55c48e99c444ad46e3967edbcc5b5d02","sha1":"14e9c3801c92889c2ad5021f979128da0b863386","sha256":"b3bf8f17f5b86e24f1a8b14588e9bcd1fdc7777f25fc483c7eceb17e59674258","sha512":"7398f24ac314abadcdfb83d13ff5687be78bb875f1f49fe4b342a2050ebca4fec00e2c519b66a59a60b0c4bda28655060eb901736dcc4b7cd0875450e2d4501c","ssdeep":"1536:W5T/dP+UWCdMi1aUollTZSDtFh24mFPnWpO7bDYGLk03oAeEFNjw++YutzMOZvvl:WVVPJui4HlTZCHh5mFnLbDA0P/rw7tzl","tlshash":"de9312e1df836b4ba15ed5588194ce5db248ef784e37ca073f3da6c0694091d204eea9","first_seen":"2025-07-24T15:59:37.581816Z","last_seen":"2025-10-05T08:48:57.423449Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5374,"timings":{"blocked":5257,"dns":0,"connect":0,"send":0,"wait":83,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/templates/default/css/theme-widgets.css@1672654961.css","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /templates/default/css/theme-widgets.css@1672654961.css HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:46:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19950\r\ncontent-type: text/css\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19950,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a8e31c5e4f7eab88374fa8ac639de409","sha1":"d5b327b08139677b39a7ac25f5374410d4b6064f","sha256":"66960dd1a18154197ac7c81a8401becab7b11a5ba48b219773081c8801a3abc7","sha512":"0028750d498ff05eb058fc523d5171cdee8a791ed5816249883811337cf0e7000c5fc5ce4ba962a8c5be9603b2fd47709cc20852aa03ec82a32bd60bb4a2f5a9","ssdeep":"384:jPFx4cIJwkWLKhDc5OmrVtzszhJtCE9CZFGB5RkNtyNoc8/8NlFO:jPFx4nyaKsn9CZFe5RkNtye/8NlFO","tlshash":"6b920e2256b32c472596a41eaf5ef2693258c2cbc509ce6dbf64b11ecfc4bc050b3b56","first_seen":"2023-08-09T06:37:32Z","last_seen":"2025-10-05T08:48:57.425591Z","times_seen":4,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/upload/pics/free_case_lvl2_512x396.png","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /upload/pics/free_case_lvl2_512x396.png HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:47:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 152415\r\ncontent-type: image/png\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":152415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 396, 8-bit/color RGBA, non-interlaced","md5":"b4799d2cfa4af6d9bea9a5645b0ae172","sha1":"c5ad39639a7335a9019ce50fb4861a56edb733e7","sha256":"bd800479183d9e2194a435a0de89dd3638710059cf6344d56362a7b6e9a47660","sha512":"eee4152f020189f4809407cd75469191cc0ceaf504123f1b8c2cf890baa72054129c8430b23c12af744e9b5b178589e265fcd9d75980364bb6548fec561454db","ssdeep":"3072:93Xyw1REamb6inQrGhcPsTS+VIUY/1kim9OFa2gp3lVeLFKQl2oZh:9nBEdb3QrPPsu+VIz21OFa2gdeLA22ov","tlshash":"44e313a28d917aac531c7ecf9d35527b453971909302a2a9f1a8c7f13117acfca1d2dc","first_seen":"2025-07-24T15:59:37.635439Z","last_seen":"2025-10-05T08:48:57.426458Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/glcases.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/glcases.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 77892\r\ncf-ray: 989ba917eb135684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=86785\r\ncontent-disposition: inline; filename=\"glcases.webp\"\r\netag: \"591ee5ee4ebd28484467d81d680cd268\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:56 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77892,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3603ec2a008be872bf6c24714c389b7f","sha1":"03e40cc415036bca381a645d40b525513cc90892","sha256":"dadf3fc35b8c51574bb104575feed7f2c3c1d9d88e201884a14acdc38ccd66b4","sha512":"b9c5c26637321080fe554ac00808350328a48f0b3ef05efa906036560bcb584dc0e06374c8d0c9e27903c5fc6badbf3a74bc6f3bc9bb71cb9c875e1cab10dcd5","ssdeep":"1536:5TelaWnoRwurZSIW//xbBNmwKMJS1vDYgQrNswGqvDBDObsf:jZrKDJS1bW9Gokk","tlshash":"d173027af1c42f02ed00dc247ce996bcebfdb648181fd1ab0056e96f1bd548546a960f","first_seen":"2025-07-24T15:59:37.700734Z","last_seen":"2025-10-05T08:48:57.428449Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5352,"timings":{"blocked":5266,"dns":0,"connect":0,"send":0,"wait":57,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseGamma.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseGamma.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59716\r\ncf-ray: 989ba917eb285684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=66194\r\ncontent-disposition: inline; filename=\"caseGamma.webp\"\r\netag: \"d95bea640dd69573ca54bc6969671805\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:53 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 2045106\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59716,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3d5c95a3bd3334817526868e53271bc","sha1":"391e86855f3155fb5155337ad2b261f82d2248a4","sha256":"1afb018ef5a37ab30058d128ecd07d1d7fe2f3b39375b3c49a8fd70105d9220a","sha512":"8f3095627d9f782451769730b75769129815afe1a7ee14706cb0084efcbad3946210020ac0ce1ea34fe618a466be32c2bc27b5271a509463b8d05ed1c2bacd92","ssdeep":"1536:KPnSuyTpR3g9BfAH7v/DMueDrWxbJoOEQrsdgd:CnLS3GBfAH7HheWXXrsgd","tlshash":"cd4302e58ad8ae797771f15700caaec601832370321c98b5b554157d3aaa76f13f8cf8","first_seen":"2025-07-24T15:59:37.813147Z","last_seen":"2025-10-05T08:48:57.430519Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5366,"timings":{"blocked":5262,"dns":0,"connect":0,"send":0,"wait":45,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/evelonesmall.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/evelonesmall.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 101018\r\ncf-ray: 989ba917eb445684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=114938\r\ncontent-disposition: inline; filename=\"evelonesmall.webp\"\r\netag: \"37d716a263d63eb8cced876b4f069406\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:58 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 206097\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7fa19743edad2c242a5b84192936989f","sha1":"4edad4ba35728bfb7fcbb0666f365a5250cdb7eb","sha256":"434e628237986b6b1c3f463c3d447a5c93d05e0e8d47d4b84c3ebaa496572ff7","sha512":"736222565fa01ff961577c8e7776af805d64ef642d583d9c0f1e7ab3b3c8740709886c1423a7439a2a8177c4e7a7b33ee83d9726b842e0f51dc55caf527eae78","ssdeep":"3072:JnDIsHh+m7oNhHP7d7g3fftzEOC5M27CfTKuW:JnXkm7wKf5XCui","tlshash":"38a302de61c0cceaf7f8b7af7910b56f8f407b4642a81c1205d812edb51aa93e1959f0","first_seen":"2025-07-24T15:59:37.769885Z","last_seen":"2025-10-05T08:48:57.432613Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5373,"timings":{"blocked":5257,"dns":0,"connect":0,"send":0,"wait":48,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseFAMAS.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseFAMAS.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 87060\r\ncf-ray: 989ba917eafb5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=93748\r\ncontent-disposition: inline; filename=\"caseFAMAS.webp\"\r\netag: \"a9da6f49b4329c277e1432fbe196c121\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:51 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 879453\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87060,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1d58d13b1c401e6443b0b383e7ac9f27","sha1":"3a42b0f09084aec1ce363f53573ad1dbb6fb890c","sha256":"35b356e234e094ca79d2bb086a0d69246610bb2838f807c180c6196a1ebcb951","sha512":"27fdb8c500354072d89cd2cf4bde96c746518f333b9dacf268d51a689beaebbf829d7d501421e5ec9ed62948c03543c6f6a759abad8b5d989f522519a44ca861","ssdeep":"1536:p3HcfFjiFgKqdGzRRmrOJSAGBU5Sb4X6/d0ftVqUEiyorKm9kOkF80ma:p38fATqkfJSE564KFiVqUEpUXyOkq0F","tlshash":"568302a5b1c3b9633ce24455d28bfa3d23aea918174f411df0a556f3fada833e068584","first_seen":"2025-07-24T15:59:37.01245Z","last_seen":"2025-10-05T08:48:57.434645Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5333,"timings":{"blocked":5270,"dns":0,"connect":0,"send":0,"wait":33,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/glovecasee.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/glovecasee.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 64202\r\ncf-ray: 989ba917eb325684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=68250\r\ncontent-disposition: inline; filename=\"glovecasee.webp\"\r\netag: \"0604f2cb7837a2811c69b9419ce6afbf\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:56 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3206981\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64202,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d18fd05cc8d4dd6f907af5fb9c0397ec","sha1":"5d48328ef843a403af6511abed792987d6ab0ffa","sha256":"39193c612b0d3fb99fc714bcc5bf38c5c0abe93cadb7c9d31e5bcd849b66f622","sha512":"21b49e3133dfc456026477130897a19e56c8e8663222398b7414712a7c542d73e022413da162d84920acb7b392c5980aeb1b4e33de8c9c6832c7004da35128a4","ssdeep":"1536:PhOQ6hzAWpw6b4qsyV6PB1OifQc5P5bXmHZV5Rp5/iZHcyqi9muI2c:pOQu1gyV658c/bXeZVF5/xygf","tlshash":"a95302dc44e1006c4ed00a3b239b8a1716f747a67ff6c6b3e1ac4904ac54626ef77ae4","first_seen":"2025-07-24T15:59:37.104965Z","last_seen":"2025-10-05T08:48:57.43654Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5366,"timings":{"blocked":5259,"dns":0,"connect":0,"send":0,"wait":50,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/joskiysmall.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/joskiysmall.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 83466\r\ncf-ray: 989ba917eb3d5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=96875\r\ncontent-disposition: inline; filename=\"joskiysmall.webp\"\r\netag: \"00c274c61ecf5c60e4ba434af50dc6a9\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:53 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83466,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bf3ae8b155d5e7aa51d43f13e0b2cab2","sha1":"3664d14585bb8466d89398cda5876ae053c34235","sha256":"6f90a642895b3aa990aa7478e7e93c0ce0bf551141b51b4e258e64efff55ed62","sha512":"28c60d5236d5bb4eecc89590a92c9ba06f68497d3317715a2d46cb63e4dd5a4d5e102632fc9ac1e06153f0ad75e839a107833e09220efb39d8f60bd7cbaa5d88","ssdeep":"1536:pY6iybnN/Gwoxw6n4F5cTgP1ME80/5hl5UiY+M6cv4TIxBM7WkMgCArxVL:pYybnNQxV40TwWi/5hl5UiBBtTY4Wkl","tlshash":"508312bcb5f899adf4ade61af223f5d412556180c9e409f32637d4178ee01dcda0d90e","first_seen":"2025-07-24T15:59:37.399763Z","last_seen":"2025-10-05T08:48:57.43843Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5371,"timings":{"blocked":5258,"dns":0,"connect":0,"send":0,"wait":84,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/rachelrsmall.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/rachelrsmall.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 98710\r\ncf-ray: 989ba917eb465684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=112108\r\ncontent-disposition: inline; filename=\"rachelrsmall.webp\"\r\netag: \"deb9ef18f818269d383256be83833d05\"\r\nlast-modified: Wed, 18 Sep 2024 16:44:01 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3206980\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98710,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"190354287647ca885d3d3b5d37b808c0","sha1":"b8bff715d6116abede975b2956b712ee0dc2505c","sha256":"39aacbe9c2bc0add6cd6309405a0e768718f80a4c2c1a33305f4796103ef3696","sha512":"6eec7352fdd43185844c639048a8a67aef4f0b8708f4ac6961129991fbe3ff3ef4fbb99b8794ff61d740ae1b8339bd5869214197e601a14a1b2fe0480f8fa283","ssdeep":"3072:NAyOO0MsQ0t9tTyaVUnhZHtTBmBsX1JuEx:qyn0HXtTyxDNVmyFJvx","tlshash":"d4a3125c720989adf50cbc7df2f088e2b9b7517b2e15c23409ad25342f81f8624b99b7","first_seen":"2025-07-24T15:59:37.563748Z","last_seen":"2025-10-05T08:48:57.440239Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5373,"timings":{"blocked":5256,"dns":0,"connect":0,"send":0,"wait":48,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeXM1014.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeXM1014.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 75996\r\ncf-ray: 989ba917eaef5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=80902\r\ncontent-disposition: inline; filename=\"caseeXM1014.webp\"\r\netag: \"a41749a07f06ceef8ba7e84cdac17995\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:55 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3206980\r\nexpires: Mon, 05 Oct 2026 08:48:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75996,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b325394df56568431c86d398645e5946","sha1":"6e6faf75cc1eb0da5f708c29d1a94465e83deae0","sha256":"f94c87ec952dff5270251d1fe1728d929079bdd473e722a2a985099f59adebd7","sha512":"a6c58ab987f47bff195a69e4517c292d12baed1e753c281ac76f5728a623589f6e68ff8630f0ee53b109f4b9bcb57bfe59d03b9db9343ac88154367b958ef610","ssdeep":"1536:GWkt7XCHjAgI6i0QT3lH8FVFwSJi3oKKM8k8ep4LnZRAHNHVSKXohZ3:GHtGHjAgI6if2FtABKMn8e+LZCt8Yoh1","tlshash":"c27302e76d9a567686a97b60c50835c42f43e494e223c0a437fc4fbdc8df9a8cd51221","first_seen":"2025-07-24T15:59:37.429283Z","last_seen":"2025-10-05T08:48:57.441853Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5326,"timings":{"blocked":5273,"dns":0,"connect":0,"send":0,"wait":33,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/12cobble.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/12cobble.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 58898\r\ncf-ray: 989ba917eb0c5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=65029\r\ncontent-disposition: inline; filename=\"12cobble.webp\"\r\netag: \"339323d3c4eb3f8a61f23f695eef4e78\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:53 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3206982\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58898,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e13a269556fca4725466aa633c474cf8","sha1":"9a1b7ee6abcdc5b96b8bc8c8aca7787c0f4e11ae","sha256":"15a82ec69d243e10b4df12939a3fa30b6713ebb8582c01f67e8169484104bb20","sha512":"f014da925229b4311945ed8bc65715111d9e3a9ea9bd522f56dbe3106a0d8ca11402eb7ad89c82141ed621a615f5920056cbf2267e55ad8681b4d2637d58b952","ssdeep":"1536:qsyBhjz1QudiRQHdqxrKDDGqyoYxCeBmLn/s/Hcft++bBW:q3FRc3YbyoYQtLn/gHGt++k","tlshash":"1343024296beac8c402cb463956f1441fc055f26ad336fe6b60173fd98a3449b1dbb98","first_seen":"2025-07-24T15:59:37.189546Z","last_seen":"2025-10-05T08:48:57.44358Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5350,"timings":{"blocked":5267,"dns":0,"connect":0,"send":0,"wait":33,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/SNOWCASE.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/SNOWCASE.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 98494\r\ncf-ray: 989ba917eb1e5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=105677\r\ncontent-disposition: inline; filename=\"SNOWCASE.webp\"\r\netag: \"692be02f7aee928b4cad8c5c1dfea6ec\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:52 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98494,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aea436fd69b54745585367e769dede1e","sha1":"5d69bae1250fa3660850efcb07f4c3087157386a","sha256":"dd7bf15e07ae83f55861fd149e30c1560b43d26982028d08216144d1fdc752b9","sha512":"83686832e51eb297542a95fadefc9a772fb9702b9510209a6507c560a76d907b4162aa405500ad2d01309dfc977fd63aa6b0ad8d130233258cf613938746dd88","ssdeep":"3072:W/a/9XxzUuVZ5k7MvGJRUTz7a2xCp9xauU:W/a/9hzU4kQvGSz7IpWH","tlshash":"cda30211646984063f402a48837d4bd4a77dfa49b2b5cf3fcb709659acef2e0b65c58c","first_seen":"2025-07-24T15:59:37.712325Z","last_seen":"2025-10-05T08:48:57.445155Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5367,"timings":{"blocked":5264,"dns":0,"connect":0,"send":0,"wait":64,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/upload/csgo.jpg","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /upload/csgo.jpg HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:46:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 352480\r\ncontent-type: image/jpeg\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":352480,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 1581x840, components 3","md5":"05e0ba1220463998f049a4c6d40a5a22","sha1":"6e6fccce9a31cacf428c400d5d492bbece9cf486","sha256":"5ea8108e008a452e1000623ca286d2897e373f148f93db04f8aeb15b35c17a64","sha512":"d5ea7d9a7015e5359b508db75437ddc21bc0ace1fa8d365e288980bd17342909efd263d0c822507cdc937773138b6751b8dc6f260ebbb7cbecd02b3d5eda9940","ssdeep":"6144:4wzEYiIc5hslqlM5rdkSHGUqOZRCnNCFilKD0a7t1a0ZX3ePBRg8hE1WlkX:4mbdc5MQMDkFACnNUmN0wPBRg8K8aX","tlshash":"dc7422818c03a71a718c0376b4139c9fb4f62faf74ec6410477126b969ea25ea76f12d","first_seen":"2025-07-24T15:59:37.786562Z","last_seen":"2025-10-05T08:48:57.446703Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/GGWPCASEE.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/GGWPCASEE.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 85510\r\ncf-ray: 989ba9182b635684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=90603\r\ncontent-disposition: inline; filename=\"GGWPCASEE.webp\"\r\netag: \"55c8ce6cb05d73585b380a305291dfbc\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:53 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85510,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"54166d03059ddaaefea96f8ea7491f03","sha1":"96b9c24068ff2873191c546604d8b5e033f9ecfd","sha256":"8cae27a5cdbe8ee1da5c413efb9da1362761d76896fc914e4ce325001bd05c6d","sha512":"f2d14f9aa7ea3ba4fe06cf64fdbf58fef21e06cf20c05ec47af31afd786ff88af30362d551d5769c2a110cd4262b2aeeb33415cac2a8c3ec14ebd48eebd8bb74","ssdeep":"1536:uHc34TQHaCIfHl+c6B8mdGLLLW964+z/Ka0g820p6niuOrPop3Qaq+X2eyuG:uHc3KQH2HlHnmoL3W965jKa0gy6nEPmI","tlshash":"c6831211a7003e1f199269cd19d56b6eba287c4752c5203da6febf9f7c3723619221cc","first_seen":"2025-07-24T15:59:37.081736Z","last_seen":"2025-10-05T08:48:57.448107Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10763,"timings":{"blocked":5331,"dns":5153,"connect":4,"send":0,"wait":57,"receive":17,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/favicon-16x16.png","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:32.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 13 Oct 2023 03:06:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 571\r\ncontent-type: image/png\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":571,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"78e2b007b5d49f8107254d43f7d89f30","sha1":"606b16f9560af72882a56dbde43af1d1619c4a71","sha256":"d9c8c4ad602f830fbcb32449c2079b471fc6f7bb22ae322decdddf8cd20c92ad","sha512":"2a14f5c6d7fcd4181b0b5a7508650f0af3d4ef058066816d9f4ac8c8048b3c840f77cbb103aa4b43ef6f7209984a9fd20692c93803dfacccfe9b5d935621bdfd","ssdeep":"","tlshash":"7ff041fff177f96b0038ac3684df59d4168393786022425f2908354df0499d885a27d1","first_seen":"2025-07-24T15:59:37.801259Z","last_seen":"2025-10-05T08:48:57.449626Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/templates/default/css/theme-text.css@1672654961.css","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /templates/default/css/theme-text.css@1672654961.css HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:46:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 0\r\ncontent-type: text/css\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T06:01:13.311428Z","times_seen":17737942,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/templates/default/css/theme-modal.css@1672654961.css","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /templates/default/css/theme-modal.css@1672654961.css HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:46:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7278\r\ncontent-type: text/css\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7278,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c6d729fc291c41fab9d1b79eaef93c4c","sha1":"17bceb9cdcf4316c488208e9b5afa2242c883b2d","sha256":"53a42fcc21de2f1c87a35df7eb4fd2f9f4e04af6b0d602dd07449dc4f47df507","sha512":"5e21b04b21525c083824a139bacdc4b72e64aa9888b5dd6db5fdc2843b9f05497d2d25f6ab2198c29e50ec361064abca4b363cd7bc47c2e4ac7c225014189707","ssdeep":"192:wk9a813BG3xH1UQAn1NyJbU+qPk0AD+lj4rXj6DpT8ObQO2tMd3dRCixR02V:wahJBG3Z0AD+lj4rXj6DpT8ObQO2tUZZ","tlshash":"38e1deb31a9705c0d61749876ff90a2c663d10131b0afc6abade359c8fc4efa4193667","first_seen":"2023-04-08T23:24:03Z","last_seen":"2026-05-11T15:13:46.434753Z","times_seen":15,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/top-cscase.jpg","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /top-cscase.jpg HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 25 Feb 2024 11:41:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27898\r\ncontent-type: image/jpeg\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":27898,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 510x510, components 3","md5":"cfa82a7f3ae07d610195b3628d03ef5c","sha1":"d7e92487b26aec1cb8e53a2081a87d32f981d51a","sha256":"d10101cae829accc7113c2eec9fa3d993ffd1393085cead9ea677cd90e6b9b89","sha512":"311ae102025edce811f304266e7cbe9e9c6346489f8992131836ea5cac441a3c2b2e7245351cf0f0629af8285378281ca2428592190f1212f446aff9b85e34b2","ssdeep":"768:CmDQxsszLf/Tzxv7nUw/ktKktpelbLZ9E8s8p:CmDasszzT1vzUw/KtpeJbs8p","tlshash":"21c2f1473dba0de4d6a90a7745868e3138d1cc4798f428c1c1ce6efd2c112fab4dada0","first_seen":"2025-07-24T15:59:37.232607Z","last_seen":"2025-10-05T08:48:57.453242Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/12safehouse.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/12safehouse.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42058\r\ncf-ray: 989ba917eb035684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=47453\r\ncontent-disposition: inline; filename=\"12safehouse.webp\"\r\netag: \"82c15d7345c174e28ba01e6d671622eb\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:49 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 2392365\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42058,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c8102bb3bd7efa0bfefd5fababa546b1","sha1":"e504dc13419309c27eb879cfe0ac81a5d82e82a6","sha256":"d8c21c9489b45cf828867e6c3e4abc3d2867913954d31c8da72e348d7c168369","sha512":"aa8aad4765b774d8ff0487f221f1eb6a09fd977be4f17688bb80e0707262c16d4cde6bb87e6cd8268deade7023058e2d93105c87504fc35dd6dcfcf408409d07","ssdeep":"768:txLS+ALv8y4j+y6KQHtl+fgEMPZ7by4z+NruS60sw:rLS+Azzy69t8uxZ+h6w","tlshash":"d21301bb86d2d6f939bce022f8cd1d16dc81cde2078352b1d58a91640aa0b694747f7b","first_seen":"2025-07-24T15:59:37.79447Z","last_seen":"2025-10-05T08:48:57.455025Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5333,"timings":{"blocked":5268,"dns":0,"connect":0,"send":0,"wait":33,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/airsmall.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/airsmall.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 93620\r\ncf-ray: 989ba917eb3c5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=106580\r\ncontent-disposition: inline; filename=\"airsmall.webp\"\r\netag: \"a66fc1a4bbb13bbd284f71aee9537a7d\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:54 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93620,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"490c57d9c12aa5bcf2f53555c1c599c4","sha1":"e222fdad9be501f07fb3f404dcf121ac2a11bff6","sha256":"a63ce9140f95ca8363f176eb8508eb63aab4e6b38cf4d47d0cf994d51486aa07","sha512":"721af3403267d44ff215ee22ad2070e289ec7106dd00ad951cc7f1a44172c5749807462fb43abe3c6420f004343431cbd29afb71a56c95c8e8a4053a7f3b0249","ssdeep":"1536:oIByIBBIz04ryuou1ayawjRigKEr4+Q6RtRztn2wvIvzVdBCfdRIrUqufybjquGa:owBy04rlo6ayajBEr4+3R/z52wvI5CFs","tlshash":"dc93122953ed1f38a86793045b3b154aa379e60d973d4e6f6904bc88bd6e241ebce013","first_seen":"2025-07-24T15:59:37.558836Z","last_seen":"2025-10-05T08:48:57.456582Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5371,"timings":{"blocked":5258,"dns":0,"connect":0,"send":0,"wait":62,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/nukecase.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/nukecase.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 97810\r\ncf-ray: 989ba917eae15684-OSL\r\netag: \"789f321c8d7b30d5707bd67e7b360321\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:57 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97810,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 396, 8-bit colormap, non-interlaced","md5":"789f321c8d7b30d5707bd67e7b360321","sha1":"edd2f298870cbc4da162fd847186f41b608d6a2c","sha256":"cf449c1cdd6eba809a529956691f1ee41b2a3c9dd85b491b8c8c64603a3366b8","sha512":"a29c072fe9bfec03f3e46506da9444b96e2f562885981dddf7efca45eab18135db52f5a5b38b9bd4aecb2918d62e2fc4dcad43a562a34d05c60f6ac36470c88d","ssdeep":"1536:TvVXRcL+EESufM03VmdLv981ZDkt0v8iTXq+TjLt2S99bhdZuhcb8Bxz8O2cqW4R:TvVXuk5347/iX7nLASbhdZtEB8O+WDta","tlshash":"97a312550bbdb244ab3fcf07a823fe411a5afd988845d869f70e04a5e76a0cdecc6116","first_seen":"2025-10-05T08:48:57.458055Z","last_seen":"2025-10-05T08:48:57.458055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5660,"timings":{"blocked":5276,"dns":0,"connect":0,"send":0,"wait":383,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/CS16.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/CS16.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 101398\r\ncf-ray: 989ba917eb165684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=107848\r\ncontent-disposition: inline; filename=\"CS16.webp\"\r\netag: \"cb4350d62187538cdfee0f3703f4548b\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:58 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101398,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c7e0a0659459983c6b43eaf703803ad","sha1":"8724ee88d339bb3e236bebd208cb90c69a8be04b","sha256":"44594c56c33214834aadef1f31472764ccbb53d41697bece7a6e0b59b0e329e1","sha512":"6b7f55e4c43b30927e3348abb7a6ec9a41b7263ab07b002eaa88b7a97c8839c41357013bd4afc9df286696e34601d55add14f96d59fada017d904eb5c5e80ce7","ssdeep":"3072:AjmcnuWYHWAq6bGkTsgy9UjBGO74gayCDNcWd/birk:imcujRq6Egy9cQbySJd/bqk","tlshash":"09a312da4499c307d6c2bb649e888a23703cf74a5c9f015ccb7749885cf0ab9a6c4cbd","first_seen":"2025-07-24T15:59:37.744982Z","last_seen":"2025-10-05T08:48:57.45952Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5356,"timings":{"blocked":5265,"dns":0,"connect":0,"send":0,"wait":53,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeChroma.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeChroma.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 62410\r\ncf-ray: 989ba917eb215684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=68072\r\ncontent-disposition: inline; filename=\"caseeChroma.webp\"\r\netag: \"24e6456295d562f40670d0093bc063ce\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:53 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 761368\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62410,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4573d72eca27aea2d4899a6a768f27e4","sha1":"28b5302405a4155244c834fd3ec151487289c717","sha256":"8942204e31cb9f7b2ed3f49c8e9619cb9d02afd1d04e7b5609ff7425538944b7","sha512":"cbf643e6d6feb2acd2df9845c056349bfb0c224a9c1f0dab33b3c03a4c9f7e12661bc9649a5eeb69c1e99f8d593e182fa1e2eb7a82dcada9f943f373ca23edae","ssdeep":"1536:I1Rnqwh27Qkr+8XRGO+OYLty5Np0b63UTu9BTYL+6c6T2:Irn/CkCQtoHtETu9RFJv","tlshash":"2f530215f630eae026533a6e24b965f0493636d3492f798247e2577b1df9ccf30d8889","first_seen":"2025-07-24T15:59:37.48702Z","last_seen":"2025-10-05T08:48:57.461392Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5364,"timings":{"blocked":5263,"dns":0,"connect":0,"send":0,"wait":48,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/qrushsmall.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/qrushsmall.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 81252\r\ncf-ray: 989ba917eb3b5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=96338\r\ncontent-disposition: inline; filename=\"qrushsmall.webp\"\r\netag: \"74f0950fe8dfd92e37baf716ec86903e\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:59 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7a2b4d14ecc03a3754028b870359a18b","sha1":"cf244b6d64cd762b2a6bd646dba474553619604b","sha256":"ed1cd05ec9a22bc398728fde00f7de82f040c869d2a680c4b2ebf65613652980","sha512":"eb0fc3fc9430f9c5846a3148187643ad08d75f355de57caef266a29aea34d955ece7eb46887ad73e72f723135738d2ffe4c867431319e2abac5b4c42fdb1851b","ssdeep":"1536:2i7yw+lxzovVKK/mADN9hIPyIi54kRZAd8XBZg43UGndjvqa:2y+lxz8kPy/4kRdXBZg2UGdjvqa","tlshash":"b2831274245dec42829bbd6300e753966005470c9b9da9834847172bcb6aff07febb9e","first_seen":"2025-07-24T15:59:37.413378Z","last_seen":"2025-10-05T08:48:57.463172Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5370,"timings":{"blocked":5258,"dns":0,"connect":0,"send":0,"wait":61,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/milsiqsmall.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/milsiqsmall.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 86826\r\ncf-ray: 989ba917eb405684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=103316\r\ncontent-disposition: inline; filename=\"milsiqsmall.webp\"\r\netag: \"eec56b338cbc682015b753d533877d0f\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:56 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86826,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eb1b9781fe7d24ae3ef8cc73ceb1fdcf","sha1":"815dff5a63ff19d5701e737ddf1b74895868be49","sha256":"2d224b479ae23e64e4ed1d99e64e7dda87adbd2a61346723c5b2e66234356e8d","sha512":"cc3b2fc116b1ab644fccbd0e94d6bee34171912a8afc7560621f266d8091cc7aa0020e754b2c55563575f51538c8ac3434f46bcd74022aa651ae2d2cf116421d","ssdeep":"1536:XuFNPYJ+QV8LFKVHq20ogL8hkJC+vOTrrsOOejz3mJT9I12Ff723vHkmyQPaBs+:WNP4sFEbqRGvrs+KJa1v/Pas+","tlshash":"5283029412ac4a335198ee661c293546ee3c0af05c77cd78358fd5c8a8ebf027db62d6","first_seen":"2025-07-24T15:59:37.033939Z","last_seen":"2025-10-05T08:48:57.464712Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5372,"timings":{"blocked":5257,"dns":0,"connect":0,"send":0,"wait":82,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/coffismall.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/coffismall.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 92378\r\ncf-ray: 989ba917eb425684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=107012\r\ncontent-disposition: inline; filename=\"coffismall.webp\"\r\netag: \"100c4aea45d9987d81944c5967d437df\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:53 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 2045207\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92378,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3af481a9ab8ac8c1de655f7877fa8e63","sha1":"f2d8e6e30e6a751aad603e53f21055d84f05317a","sha256":"80aa7fa106f0983582a6d6ccb0aa77eb4c0b3bf8f2153ddf1cdff8e30646c626","sha512":"d0a7b849dceb87fff0bc22384d64787033a49c2bf6983f438397f7880df3216a678372e25638f7ca10fd040f6933180479143b56304a9d21100c69370dfb666b","ssdeep":"1536:2ZWG+1P3wn1WzDli+gx+nixRcGcjvG1bsD/sgD+/2p8MG70z1VtHHrTXE5JUzApb:lR144to3x5gvGm7/y26MqurTOxpmvi","tlshash":"4d93126f6c7a0e1e86408421f1c4608e93affb43036bd545782b5cb50a76389e997f2e","first_seen":"2025-07-24T15:59:37.140478Z","last_seen":"2025-10-09T18:47:52.508042Z","times_seen":4,"resource_available":false,"data":null}},"time_used":5373,"timings":{"blocked":5257,"dns":0,"connect":0,"send":0,"wait":50,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/CT22.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/CT22.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 88276\r\ncf-ray: 989ba917dace5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=95907\r\ncontent-disposition: inline; filename=\"CT22.webp\"\r\netag: \"e7ab6c6c5558e74a8ed44d3778707393\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:58 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 879459\r\nexpires: Mon, 05 Oct 2026 08:48:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88276,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e3667303223b007dae9aa392b7d3a659","sha1":"9a9239d7bbac75b867c379765171535a7f32f780","sha256":"30b84e7a831dba4a46cc84fdb44e3d1ea0a716b5082a15370664103067eabb84","sha512":"a3eb41482bbd7b0548737abf9911bf24e0cdb1a7e2618064b991cfce44c529b6132693be420a63ad9daee992bdd7fb430b16ca2bfc208c362d90094c1a15bff2","ssdeep":"1536:uP+AimVS8iEIQAhV9n6z4zL6WcQt3P/COAGSGjXSGSxp4ZecS6xN44AEj/FAE:uP+3L8iEWTpDtTfarhapSxp4Ze4ND/KE","tlshash":"5583129c63523fb2e68bb451b483cdbc2ef20675e5eda09ebc11730dc65188466a2f84","first_seen":"2025-07-24T15:59:37.307607Z","last_seen":"2025-10-05T08:48:57.467205Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5326,"timings":{"blocked":5282,"dns":0,"connect":0,"send":0,"wait":33,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseawpp.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseawpp.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 91252\r\ncf-ray: 989ba917eae85684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=96990\r\ncontent-disposition: inline; filename=\"caseawpp.webp\"\r\netag: \"f8fda4725077102800db13e33fe1dfd3\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:53 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3982677\r\nexpires: Mon, 05 Oct 2026 08:48:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a16f9719cfb3e189b89dc0debd37db9","sha1":"7878b881b733dcca3a9de0d78ff0790a0569852f","sha256":"1a64b204cd78fde711fa38c7527801c841debc1b029ae15ee6ef5e0c4d532398","sha512":"7150d3ae6765e5faa0013b02fa7d82e07a7628db6535d896a2b075226f4ee34c67069cf3a2671005179b166797e5eef3e3b674ac9dbbd9a94e1f09c11a1130c0","ssdeep":"1536:Oktq2oAsWqf2Pz4E39mjocs8idpgoehdsrMfAUVPpxQFJNZCSLOI:Tq2oL1+Pz4Y9mJsh+1oUVPp+XZTLOI","tlshash":"0a930230033b82c3e8796b4259b79daf58d3ebf17d47e6c6d282ea1d469511f1ca6c04","first_seen":"2025-06-22T10:27:53.460749Z","last_seen":"2025-11-26T15:55:36.2655Z","times_seen":8,"resource_available":false,"data":null}},"time_used":5323,"timings":{"blocked":5274,"dns":0,"connect":0,"send":0,"wait":33,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-05T08:48:26.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 24 Jul 2025 07:19:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 45855\r\ncontent-type: text/html\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Liveinternet","description":"","website":"https://liveinternet.ru/rating/","common_platform_enumeration":"","icon":"Liveinternet.png","categories":["Analytics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"InstantCMS","description":"","website":"https://www.instantcms.ru","common_platform_enumeration":"cpe:2.3:a:instantcms:instantcms:*:*:*:*:*:*:*:*","icon":"InstantCMS.png","categories":["CMS"]}],"data":{"size":45855,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (37393), with no line terminators","md5":"ff9645b4117aecaf6a891a3c537aab75","sha1":"fb34e230a5351a6f95699461481a54bc6007f7e2","sha256":"c9192e3d085021b885fffc64057013d856b1d0b950cf55014241834bc9abb5a1","sha512":"a065d59f615fe2ca48fa6c4c13bb6ba5d80210884dd0bf3b31e93364c846076fb4f96b1e312be8a21419cba76905580e32b01fc50535ad38d64f8a5d2401e731","ssdeep":"768:e9b6KnxoGIIqjb83ns9dJhRLbto0joYM4heRLUEx4KOIwUDuuHBA9H5N3X0ezTmm:+O6xoGIIqjbUoVoJV++UE7HezUkTmdpK","tlshash":"a8236863418b245f230290dbce656f0cf9d6807eeb131f05996c7e2f76ea854c8266bd","first_seen":"2025-10-05T08:48:57.469978Z","last_seen":"2025-10-05T08:48:57.469978Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":45,"dns":0,"connect":21,"send":0,"wait":39,"receive":20,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/www/css/fancybox.css","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /www/css/fancybox.css HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:47:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15598\r\ncontent-type: text/css\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15598,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15598), with no line terminators","md5":"3a867c1ea947834b92530f9d57fa799a","sha1":"d2705c0d01dfb0c20f2a53f306101a5ffa5e6ce0","sha256":"ee03159a1ee2d979a8f7d9afbdf9d29fd7597ee9d38a2ee3e323dd99300c511d","sha512":"624c83c19c70a54c8ef3a82ec5dd3f3679b7bf99a8a78c24b1fa68d823506b84c4ef284d82c64c13ebec90c53630ba8249c376ebc729af2c42f73fa7bee4f692","ssdeep":"192:uL7boMZcdAai/hvzydY8UgDP5sIP7bcCBPaK:uLn/+AaiJvzydYWP5sUBiK","tlshash":"5c6223133104392a46335b08d3af990ef279b953961121f799afa92647c63c432feacd","first_seen":"2023-04-05T22:42:18Z","last_seen":"2026-08-05T08:28:37.83641Z","times_seen":3775,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/templates/default/css/theme-content.css@1672654961.css","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /templates/default/css/theme-content.css@1672654961.css HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:46:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25961\r\ncontent-type: text/css\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":25961,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1887)","md5":"3d6c26665c786b42fd903f832b6f5132","sha1":"22ef21f108dcc114bfb3527621559c6ee3ec0bca","sha256":"fc7732e16322a5486bd79779ef00ef951d6e28e316a3cf529fe6a627eb63b72c","sha512":"b2228e1ce35a8f1a202badb6acbb90db0dfcdb3654a4430d57d7e18c5eae41e27683b4eea5397cbb3da0f0e646b53611b84ae69768177fd70251bf3910908d61","ssdeep":"384:K4Z73A84nro4BVNGlJfo/w7Vwn9gC6AEI99/HH7R3On7Da8hLFm9aGtE0+5OUnGB:QMqR5UGXLmDSx","tlshash":"b1c233768a6338a6a747d019beaeba913358c003c90fc96d7b58661dcfc4b18d4f3b54","first_seen":"2023-08-09T06:37:32Z","last_seen":"2025-10-05T08:48:57.472421Z","times_seen":4,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/upload/pics/FARMAWPCASE.png","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /upload/pics/FARMAWPCASE.png HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:46:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 163149\r\ncontent-type: image/png\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":163149,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 396, 8-bit/color RGBA, non-interlaced","md5":"7d118c343ae6140758622ffa470484d9","sha1":"053e301704a3b6cec87f2594fff90b2cb04c6280","sha256":"4190f4995f1cffb1b708843f459d8480bbea4148703f58663f1a12c32a6494b6","sha512":"68645d8dddfb97c48b6607310c76aeafd718da1cb2a6681fcd7d6ef0168c796abb4196b612e17a10fb36f6cae4e9ba4323c59d67b1ff904566ef94716198b4cd","ssdeep":"3072:FXykttVfD5COxooTsIeff1r/HmCT5e8m2C7TGvylic7P:13ZBOo4IAf1r5Ne8m2C76vyli2P","tlshash":"e7f312ecf3f11007255bad056709ac4e336ab7a753a6dce08b397a10a81dfa7051d1ee","first_seen":"2025-07-24T15:59:37.692466Z","last_seen":"2025-10-05T08:48:57.473126Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/12dust2.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/12dust2.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 74926\r\ncf-ray: 989ba917eaff5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=84551\r\ncontent-disposition: inline; filename=\"12dust2.webp\"\r\netag: \"20a8241097e454ba2eb2b2e2f2276abf\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:54 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3704411\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74926,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6f0bb1b533f7c3451c04f37ea90c44bc","sha1":"958e473df79dce50d7461da57b2f93cbca3a808c","sha256":"1818ae71ccd00864500a91cfe5f8bae4fa7809f42b73ef2fd85d416589c38965","sha512":"94865bddb08349367455da713fb7bd78a353ff8d2f8e73f84f5bcf332c89e5ce71df8546e11ae3185e7de3d99057882151e862fd00ba393fc31b5b8710b80c6f","ssdeep":"1536:9CPawNFinxpSse+x0yzd4yFWWwVMJDbj3wsdlGPntc6I2x:9CyRnSJNyBvSMr3/d0PtI2x","tlshash":"d37302b1ec61c54c3758d8b56196f35810aadcef758a12da837bacbc100062d87ede2b","first_seen":"2025-07-24T15:59:37.088131Z","last_seen":"2025-10-05T08:48:57.47492Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5335,"timings":{"blocked":5269,"dns":0,"connect":0,"send":0,"wait":33,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/farmcase.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/farmcase.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 73362\r\ncf-ray: 989ba917eb125684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=83082\r\ncontent-disposition: inline; filename=\"farmcase.webp\"\r\netag: \"8408f5f72da44aba0180291eccf17c93\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:59 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73362,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"38bb46dd2eef86eb9d445e1314ced101","sha1":"915e11b4e431c0ed081b23b9f901deea29acadb9","sha256":"84f9507dfd9826940afacd04e363e4949f21e6f4bb001ba8e4e865ed68018316","sha512":"4e1c79695ef2ab065769137ced4ddef54730ac5e4e41a80da9acaa733caa7c7b50bcffe35f3c7096bc806544fd4cd6a9dcf7ed79ab12651c54205306a984a54e","ssdeep":"1536:giRvS/cuA16tKu55e076reHGU2fzZ7sjZfbpDo5eP81aqErjr8CgP4eVQ:gsYlU6IQV6TJzZ7sjZza5Hq6P4eQ","tlshash":"3d63023276b6a32a2fdbe41257b4532b560dccbe5beec14960f0c76995712d828dc860","first_seen":"2025-07-24T15:59:37.677876Z","last_seen":"2025-10-05T08:48:57.476757Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5358,"timings":{"blocked":5266,"dns":0,"connect":0,"send":0,"wait":85,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/Gradient.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/Gradient.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 99432\r\ncf-ray: 989ba917eb145684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=108996\r\ncontent-disposition: inline; filename=\"Gradient.webp\"\r\netag: \"d77b74370883159bc1bf6f035db9288e\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:53 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99432,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8a2112e76542c791d0692068b14e7eed","sha1":"a75c886a1ee4cf2fa1fe30f144b1a5a077eb72a6","sha256":"1ba4467f258868cc320e62a3ced021af254594d88935a02d6be948d4973b0fc1","sha512":"095880484b572660d3c8986b24ae22028a609e2e43077dcacc5c8b662c156cc49e9386f9a75eb9bd52b1b017d7cd2a4dbbeaaeac27c63c7c3d69063146fcfe4c","ssdeep":"3072:j3ZRaQhBOlz9JSORESYTDpsakFtn7izSX:j3ZRarl+ORgDxkncS","tlshash":"92a312f519cf028fb5082cb29915457b3e8864b5e703fbcdaeb2e73648b69749718206","first_seen":"2025-07-24T15:59:37.356042Z","last_seen":"2025-10-05T08:48:57.478678Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5357,"timings":{"blocked":5266,"dns":0,"connect":0,"send":0,"wait":53,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseClutch.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseClutch.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 75766\r\ncf-ray: 989ba917eb275684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=80491\r\ncontent-disposition: inline; filename=\"caseClutch.webp\"\r\netag: \"c72029933cd0ab2f039f43f103e1f8bf\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:49 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 63396\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75766,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"22478b940c3ee6bc5719c75e1f92ada6","sha1":"ff13a34786776d051c06767e1fde53a7d97cac24","sha256":"3ab6e62cedf661434391a899d9db49378f6bdaac3cd80ff53cd9400937d2665c","sha512":"cf487901e4592de4d7f8d385a205150ed9cea4c0e4da156157ec06c9ef0a3bd3f1636ebbb0e340c6fb22eebd209baa569a44922162b22c08271ae0971b5a6817","ssdeep":"1536:KtWR0QCuCE3IU1MeBJNk5zDmvADKkZ7uNHv0IyhSq35KUeoyvY4Csrek:mnQCuCRURJNcavs4VKFp96+srek","tlshash":"3f730218a9554e55cb62488223979e077e4c3a78438778fdb81816cbd73b7e12e482ba","first_seen":"2025-07-24T15:59:37.807579Z","last_seen":"2025-10-05T08:48:57.480339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5368,"timings":{"blocked":5262,"dns":0,"connect":0,"send":0,"wait":50,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/upload/pics/FARMAK-47CASE.png","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /upload/pics/FARMAK-47CASE.png HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:46:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 165527\r\ncontent-type: image/png\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":165527,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 396, 8-bit/color RGBA, non-interlaced","md5":"4bc85724ea1872b501881142e27a94c3","sha1":"795c187e200ec75b1c7013fdb247347c8040e040","sha256":"eb843fef6e12d37a545ea3f0e85c57a75298fe73f1ce9c225c2afb0fe70106b7","sha512":"7748c537474e19b34a07412928817195520d2df1a1cffea89a58c6a96127198dae2b8fdb985a1805aa30647a6d9385b00f20deece40a05354e748537d974f765","ssdeep":"3072:M1RylmigG5eZUXlkSHtd5sctqHu0AFQuPb+sKnPiWIOFIbMY7e:8RylmigRZUXlDHtd5sNu0wKsKnEni","tlshash":"21f323c8597e990fd9348d5c75b937c448b5505faba1a23039be702c327f5a3780f829","first_seen":"2025-07-24T15:59:37.130488Z","last_seen":"2025-10-05T08:48:57.48191Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/vertigo2025.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/vertigo2025.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: EXPIRED\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 989ba917eb045684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T06:01:13.311428Z","times_seen":17737942,"resource_available":true,"data":null}},"time_used":5494,"timings":{"blocked":5268,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseChroma3.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseChroma3.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 58408\r\ncf-ray: 989ba917eb2b5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=64362\r\ncontent-disposition: inline; filename=\"caseChroma3.webp\"\r\netag: \"40fcbbabb84dbd5d6734ec552c7988a4\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:49 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3206981\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58408,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9b5cbfbad657f59612bbe17a0da50757","sha1":"d57ee294cbbd095c0ec7a8415bd0b105cbeb96b3","sha256":"f8fe8c22b6ed4d0282c8c4ab8335fece051c13ffab47c251762201762cc7795e","sha512":"10845b9f286822395ade2e0c13cfcb5d587721a296c415ea2be75707ff8ca8c50d74277e2ff8400709ce3fcdd7fe58fd2d40704ae0e66384b00b0ad601f26e0f","ssdeep":"1536:517wL/QgWHPbWpxoErb4pxYQBu18tSynF:EaHPbWQe0PYQU18HnF","tlshash":"014302b999000a9dd2d00617574f943adfc119efe0ffe99588e8279003ad570b66b7d2","first_seen":"2025-07-11T02:15:54.531033Z","last_seen":"2025-10-05T08:48:57.486083Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5367,"timings":{"blocked":5260,"dns":0,"connect":0,"send":0,"wait":57,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/www/css/bootstrap.min.css","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /www/css/bootstrap.min.css HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:47:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 194901\r\ncontent-type: text/css\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":194901,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65305)","md5":"3f30c2c47d7d23c7a994db0c862d45a5","sha1":"7791dd1f3173a0d62cc39c21d2ad71fc8dad0e72","sha256":"c0bcf7898fdc3b87babca678cd19a8e3ef570e931c80a3afbffcc453738c951a","sha512":"49b891fdebaca612a8315557cac4ca1bfed5b1e5a28be63715d1ebb741292a0a53a1979e9a1a8779978b58b849badcffdaeb76570d6e4048f631b445f9354150","ssdeep":"1536:ZtGg9JfWgeQK5wlP72qgOfI3N9LsqkVkpz600I4lp:ZtGg9JfWD9kVkpz600I4lp","tlshash":"991482d6f190307d98a7c2499591fefd866fa585d7120aaaf0137b6807ca7c30963ecc","first_seen":"2023-04-05T16:04:29Z","last_seen":"2026-08-06T04:22:38.670165Z","times_seen":9311,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/HEADSHOTCASEE.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/HEADSHOTCASEE.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 83408\r\ncf-ray: 989ba9182b565684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=89049\r\ncontent-disposition: inline; filename=\"HEADSHOTCASEE.webp\"\r\netag: \"a59f5558d7e7b49690a2cf6a484d5a1f\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:49 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83408,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"756a4e4d79aca1bd9e7b8941095e5e4f","sha1":"46c71abb220a3f5c50181c4f4ca3f47eaf754dac","sha256":"d65d0a82a584cee0d09b1b87ceceb4f9dd3fe5470cc025974b150ae96ce305f4","sha512":"5f4b28c02f1ed5ae6c04a479ecd24cdd4094c07df25ae422d64a4ed38bc4aa3a194d3341e6e8f02876210f3d957495c7123a03e8613d17cb7b6eb3b086bb316e","ssdeep":"1536:mC3+s97JUe6wwCL2/x7PuNBJmw7BSzPQJQnNXmFH+SuG7Pv0Q6z9mH:Cc1UpHg2/lPuXJ17BXyNtSvvjDH","tlshash":"72830281a3c72c2dbad5ba348c752397c937635a36a13ca4ff42e4189143bf5362710b","first_seen":"2025-07-24T15:59:37.804139Z","last_seen":"2025-10-05T08:48:57.488143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10759,"timings":{"blocked":5327,"dns":5153,"connect":4,"send":0,"wait":52,"receive":26,"ssl":163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/Case-FD_7years.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/Case-FD_7years.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 111360\r\ncf-ray: 989ba917dad55684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=124216\r\ncontent-disposition: inline; filename=\"Case-FD_7years.webp\"\r\netag: \"1657c4639d41259899b050a94a242d6b\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:57 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111360,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cbed5704d61794f4388ad387d18b7d97","sha1":"c7b7deb0684450fc9216558bcfbbca2156a49f68","sha256":"4108c430ab15a6d765c57b3e8cbb1426647470d0c717e189f2f362c730ab30ca","sha512":"76b788e35e38c9ffbcd587a346ae09d39e0c09a00be8a71d3ed9f50bace29e5dee003752d624a0bf426536d570189e7eacc9b3e6972753239ddb03709901d65a","ssdeep":"1536:xICMvigudUJRtX5cxjZLmOO788tboXj2eb3j6SjUCSDPJuSU3zufoA8ozyVnf:xbMvirUJR552Lu75pHOajJuSFVzE","tlshash":"1ab312f1134c7644e1295a0e39cccae0b7561732f98e40cbcc6abe996dd0fe6c41a4e6","first_seen":"2025-07-24T15:59:37.67002Z","last_seen":"2025-10-05T08:48:57.490344Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5334,"timings":{"blocked":5280,"dns":0,"connect":0,"send":0,"wait":42,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/ytcase121.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/ytcase121.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 60462\r\ncf-ray: 989ba917eae45684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=68594\r\ncontent-disposition: inline; filename=\"ytcase121.webp\"\r\netag: \"312c2a43dbbf51326692f65ad03feef1\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:58 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 2669389\r\nexpires: Mon, 05 Oct 2026 08:48:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60462,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"96b6d1adc1aa39c7cf5373c4516498bd","sha1":"bf9fdbcfc259de9e2c142b01b02de4e74cf27021","sha256":"ed3693f1d684b342369c627e35ec6ff14b363917907f93030efda749992b6568","sha512":"a21b17a9778c2e12f3ffaa53c404557e7f43eddd31ea50ecfd9a31f2891262d950dafc3e1efe10098c06ad0a1f45124714a904e17b36631005cd5125f07f70a4","ssdeep":"1536:PaCtS20Cp0+on4exUwsTXpBq8rCNYCD6gct:iCtrZIjUpjyY8ct","tlshash":"0a430235058baba2f680e0c5d637d556d58c1a2047f1d80cc8b39f6fb8dea3405d6e3a","first_seen":"2025-07-24T15:59:37.281412Z","last_seen":"2025-10-05T08:48:57.492146Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5317,"timings":{"blocked":5275,"dns":0,"connect":0,"send":0,"wait":33,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/FD_water.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/FD_water.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 358254\r\ncf-ray: 989ba917eb115684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=480789\r\ncontent-disposition: inline; filename=\"FD_water.webp\"\r\netag: \"1590934d5ebe41a39286631467cad43d\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:50 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":358254,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2027b18b8745042c17146de25dd5ed8f","sha1":"1086495a2275cf04fbf2d709bf213aa298ba7ed2","sha256":"ced117c3e337eda8267bfc5ac55c4b7ce212c8bae740927f2d7ab1bc13bfeba1","sha512":"24d9e505cdf1aeb5eae1e2cb8fcc6c74b57d82a9d21467c1dd25fe5ecffc1163eb0343b34ce0f8ff966215a77ba7b964fffd0b20fd01451c488f4b362a8fa394","ssdeep":"6144:OS9mTAJEstbHCYH4hSH2FzXEIEDPrjscw+JtwFbY1j8meoH6CO/wWDSg5hP:PEybeYIGez/EDPUcw+jwFbQH6COz+g5l","tlshash":"ed74233aca094fbd8855a0c52af88abfdf83a547dde84e6d6620cde541e01214dcdfd8","first_seen":"2025-07-24T15:59:37.705221Z","last_seen":"2025-10-05T08:48:57.493982Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5379,"timings":{"blocked":5266,"dns":0,"connect":0,"send":0,"wait":59,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/FORCEDROPCASE.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/FORCEDROPCASE.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 73818\r\ncf-ray: 989ba917eb1a5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=79209\r\ncontent-disposition: inline; filename=\"FORCEDROPCASE.webp\"\r\netag: \"23e293687fc57aa35e7812d899958691\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:51 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73818,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"031e22f897fff6e88f532412925617aa","sha1":"f44c3573e90411db196f3e34cf0aabdeb6a54b31","sha256":"1fbd8b2a6657f75b150e0a57da01d8484cae807d8dd3611898b4b49835a69d6a","sha512":"d337d8d3cbf82182748df8686f1466aa3d5a3059c2765c437f9b66897e905b47fbb9769667f830df992df611b1d053aa709c69b2f2c5611f82f3fdb9045ae3c4","ssdeep":"1536:whMgqoVa9MIs1BOwvxwS3m/A8EeswS+Htg1ZA:o66IsTp3oonwdHWXA","tlshash":"0973124df69fe630a851437f3d5581de674ae302ba27598b1170bc0fa21dc288fd64ba","first_seen":"2025-07-24T15:59:37.590834Z","last_seen":"2025-10-05T08:48:57.496194Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5362,"timings":{"blocked":5265,"dns":0,"connect":0,"send":0,"wait":60,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cs-case.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 13:02:46 GMT\r\nexpires: Fri, 02 Oct 2026 13:02:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 243940\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-06T06:02:35.311094Z","times_seen":546718,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":17,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/COR.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/COR.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 106268\r\ncf-ray: 989ba917eadd5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=114195\r\ncontent-disposition: inline; filename=\"COR.webp\"\r\netag: \"1922212fa668aaa528985692b4c0c426\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:58 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 127139\r\nexpires: Mon, 05 Oct 2026 08:48:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106268,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e222303b485daf1b1893b357444c2346","sha1":"8d65c1b460a8e6d5f3e607ee82a76d570c1370f1","sha256":"9d8e1989cb27ddc79621c3252c761a216b5451ec5c9886d1e2b5bfee922833ab","sha512":"23c432a15dda9949b1371f7242197e67efb8a6a28b04467208a0d5932107d2dc244fc6b4d7bca91dbe8d9079a26d42ffc6a42bc9d329b86ed0b4cf4ebea7cf19","ssdeep":"3072:GCU1oLCB71XYoW+WyLPtUWM4W+ocwiKLxWV:jU1qcXYoRBpTK9WV","tlshash":"18a312f4924f9e7ecf6dd58087b04de327362e79b7448cdea986d850065fc04bac6822","first_seen":"2025-07-24T15:59:37.545801Z","last_seen":"2025-10-05T08:48:57.497972Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5312,"timings":{"blocked":5279,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/12chop-shop.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/12chop-shop.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 76946\r\ncf-ray: 989ba917eb0a5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=84342\r\ncontent-disposition: inline; filename=\"12chop-shop.webp\"\r\netag: \"f60deb3dc8f8c180631e1a9e835b505a\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:54 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 1930454\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76946,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"40fa6db3596d280f9261080ed35879e8","sha1":"b102cd39eb80db7912071cb095ef1897b95df298","sha256":"ad718a05208281519caa774eb281c26bd25341c0492c6bfcbf51c3b16ec47cad","sha512":"c737b67643e05828abe69f712d228ee47272e1af13daae76b80016132dd6a696539ac40d7630e10aa0d24c7baca0b3aca3bcf1a0ff4975811a44a7e56a37f50d","ssdeep":"1536:xiT+KPoUZcpFbIPZoH5pZVoyubFfko+nGkAGO/TbVGMUS3:xwStIB5DMGkDO/vwS3","tlshash":"547302c2cdf5ece0cb4dedad883484856cc7ccbc1d596ec56f1874be52cb6491528968","first_seen":"2025-07-24T15:59:37.404137Z","last_seen":"2025-10-05T08:48:57.49981Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5352,"timings":{"blocked":5268,"dns":0,"connect":0,"send":0,"wait":41,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseCSGOWeapon2.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseCSGOWeapon2.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 53710\r\ncf-ray: 989ba917eb245684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=58713\r\ncontent-disposition: inline; filename=\"caseCSGOWeapon2.webp\"\r\netag: \"59cbc6b290eafb44682307ff6b7d1e02\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:49 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 740393\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53710,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b6cb39e740dbd0b03ca072e57a0b24b4","sha1":"3eeab7a96309dc8ba21fc957724a07803bad6bf0","sha256":"27cbc78931a89cfbde5a6a8612a08a688175f2f7eb10fc4b169f612e60bbc601","sha512":"e8922486a3ba0ad52d1677308b287623032e65b25a808ebe87d9f6f45c8d21875a08255bcccdb8f12fe4d694cbab8352cc663ee67493f4535fa5dc6fa17be7b5","ssdeep":"1536:qzueoAoRIOPdcT/uO1OYOAfIECI8AnNxE:Wv4dcT/v1ODAfIECIR3E","tlshash":"053302c7b804e934974b81e3b063b87146dcf0211fac6bcc6f9a4da4270456b3bb1e90","first_seen":"2025-07-24T15:59:37.025362Z","last_seen":"2025-10-05T08:48:57.501771Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5365,"timings":{"blocked":5262,"dns":0,"connect":0,"send":0,"wait":44,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeSports2013Winter.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeSports2013Winter.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 52642\r\ncf-ray: 989ba917eb2c5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=57583\r\ncontent-disposition: inline; filename=\"caseeSports2013Winter.webp\"\r\netag: \"f794b72f19e4ecf9ce42b1575fbbba61\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:55 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 63395\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52642,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e4ced8f3f664ad14ca8829d2171c8b63","sha1":"4799c796e155a81b4e9cad6f86baac8dbd5e6d17","sha256":"309cb5d81bad9e579dc903722db418002c061f3115e9078585012a79fceab1c6","sha512":"69a9653ff54d7deb55c2f1e7ab9a97b969d521b97abcc2f04e4a7094a13740622e608ffd170115b5dfe3b175fe3c88a2af351b923f34dc93e2f570419474fec2","ssdeep":"768:W/+KengwqGPWbH/FdMmUJxjfzpjwnAKNe6Ia2rcJ/BTSEFasdJy1Vv:wMwGPWbfgmUJx3WnNwfZrcJNVasMF","tlshash":"2133f16a8805ceff04d60e5e384a919e2fb8793cb9dcb0c2555cd9f361b8992a6b1c11","first_seen":"2025-07-24T15:59:37.480573Z","last_seen":"2025-10-05T08:48:57.5036Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5365,"timings":{"blocked":5260,"dns":0,"connect":0,"send":0,"wait":49,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeSports2013.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeSports2013.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 60922\r\ncf-ray: 989ba917eb265684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=66606\r\ncontent-disposition: inline; filename=\"caseeSports2013.webp\"\r\netag: \"1675cfd76fafe9a92e9d39bb6e79e796\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:54 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 63395\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60922,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2fac48057e346e2e718788d61b9b6bca","sha1":"84aa607906147c02de88f17e96e329acc05793d0","sha256":"646da41114780a847da32afec9d171b95a879613df5ec30b4f65803f18e32bb3","sha512":"3c25a92137124751d77b45e3c8989c49d00e6b6a3e6a74b447fb7ff1c5677257c7b1010be4726888b35f59d9612890fe04d4c74b35c618e5d736a5e1cc9a0892","ssdeep":"1536:F+lUk12J/w3yZ5VmYDgTsvtPQFjPcUILsu9:0JP3H8HQW5Ls6","tlshash":"54530118ef310de866f7b298f7b2b99f774e133dd624c88a8e73584b48d29345985881","first_seen":"2025-07-24T15:59:37.596063Z","last_seen":"2025-10-05T08:48:57.505423Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5366,"timings":{"blocked":5262,"dns":0,"connect":0,"send":0,"wait":49,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/frysmall.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/frysmall.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 77416\r\ncf-ray: 989ba917eb435684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=90110\r\ncontent-disposition: inline; filename=\"frysmall.webp\"\r\netag: \"a708299dadb47109c62f5c422faa47f4\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:55 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77416,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"744cbbe5084e7ccb11224c36e91dc206","sha1":"d6f15543a75d42526c324b8b05dbd3532db03ea7","sha256":"68f6c6521cffa5e282e0017f9628591c0d79c4295cdf59a508867b3dda00f506","sha512":"5dd34f82129b522f3aa8062fea9cf6231ce10797f06960f3e8e7af0eed5a27eba207e351f2392935b03938c7e8deab3cca427cbec2790bb9424a39c687203961","ssdeep":"1536:5W2oGAEv/mmM613cb6je8EvGbfr3dyRLjvjw/nMIa:5Hd53cGjpEvGbByRvj6MP","tlshash":"c273127382603b36fe689d9660284d4c3d89efd20a5bdb7975df049f1e18a11c289cc7","first_seen":"2025-07-24T15:59:37.046545Z","last_seen":"2025-10-05T08:48:57.507181Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5371,"timings":{"blocked":5257,"dns":0,"connect":0,"send":0,"wait":62,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cs-case.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:58:18 GMT\r\nexpires: Fri, 02 Oct 2026 12:58:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 244208\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23776,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-08-06T06:29:32.428671Z","times_seen":9347,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":8,"receive":1,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/PRO22.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/PRO22.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 86398\r\ncf-ray: 989ba917dad15684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=94522\r\ncontent-disposition: inline; filename=\"PRO22.webp\"\r\netag: \"779bbc630b88e1fec2873caaa2fed845\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:47 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 2038919\r\nexpires: Mon, 05 Oct 2026 08:48:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86398,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"92836c58dc2747d7ab7a88895b344c99","sha1":"7e7d606ac2359db768796f0b24c241b9af236992","sha256":"a4943dba22486446a142f890e64f1aef62c982d79383500e3f258b78389ecaea","sha512":"f8c2d5c527328862ea90f1debaca9bf8fa2a7576c51de031de6b4958376d966bfd9f64abaf08e97f14b1d39f77d85a913af4f7144a3849736d01cdd261948253","ssdeep":"1536:Hzepix9xK6r5GlF8Ou89JdUKgtfsCGrEdacHilSRlW41JfmrJ66gZniPpYtIt:TeUiNlFtdtgf8EdZlRXxniPpOIt","tlshash":"3a8312a4abc670c69fadc8c59ad929e3d9587b5033124227e084db92e427071f77cf25","first_seen":"2025-06-22T10:27:53.499272Z","last_seen":"2025-10-05T08:48:57.508837Z","times_seen":4,"resource_available":false,"data":null}},"time_used":5326,"timings":{"blocked":5281,"dns":0,"connect":0,"send":0,"wait":33,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/norse1.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/norse1.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 68064\r\ncf-ray: 989ba917eb075684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=75497\r\ncontent-disposition: inline; filename=\"norse1.webp\"\r\netag: \"09a0ddbb3af5cd61872b8d41cfd1e7be\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:57 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 687126\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68064,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a2987621a9e1795133db38f1a51ab1d9","sha1":"681508b770a6cf8661f72fb421636cea62df3ab0","sha256":"d342e40230ce235f532516195367a2f939faa19764847224c2c3680756f16794","sha512":"051224d35609f08a33ceb0981b13ed84fda60a7adfd066d7b3cb916a338b36cd874debdbbe75a99ff08ddb874f143a0524a464b5a6940b67e84c8c7d1eaba17e","ssdeep":"1536:qLKlMaHuFM0IkV5JQVI7w6JzFlJPcddIW5hda3/7eUH0CV6xv2Mr:qSFHuFlV5d/LvEdN5Da3/7eTo6xOI","tlshash":"4b6302defc2b5f6dc60e70f80176d9c0f2596a31d6b10421f71baa14ef8c5e511aa272","first_seen":"2025-07-24T15:59:37.727406Z","last_seen":"2025-10-05T08:48:57.510738Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5351,"timings":{"blocked":5268,"dns":0,"connect":0,"send":0,"wait":33,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeWinterOffensive.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeWinterOffensive.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 60910\r\ncf-ray: 989ba917eb365684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=66241\r\ncontent-disposition: inline; filename=\"caseeWinterOffensive.webp\"\r\netag: \"3ff58c903df2eb6848d5a16c6c3c790f\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:56 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 2038767\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60910,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1ef830bc9b068f23b2d5bd42b45aad70","sha1":"642f87bc379765d72b53510cd51ad1de717b7038","sha256":"1f0f09a50a699d5184c8b6073fd984ed0b6b4700206d383df09097d0d37cedf9","sha512":"b47d7220fc503615d1af470ac20bfbc7350118be2a6a687ff3ddf66d3c6effaa0968138c6d066b0c34949f7ce9915f62be6d62113bf29a9d280ca57bf8697042","ssdeep":"1536:R7LcH4IpEK3jBBUDShyd6amfsiXTKI+UWkIiDWhCVLrW:R/cDE2jXQlSfsiXf+UWkDSSLy","tlshash":"2653f2eed946292589432bee8212f1c6e9c66b68c19f09021c371cf87ffeb177571a50","first_seen":"2025-07-24T15:59:37.054728Z","last_seen":"2025-10-05T08:48:57.512374Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5367,"timings":{"blocked":5259,"dns":0,"connect":0,"send":0,"wait":49,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/GLHFCASEE.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/GLHFCASEE.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 66218\r\ncf-ray: 989ba9181b4e5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=74174\r\ncontent-disposition: inline; filename=\"GLHFCASEE.webp\"\r\netag: \"8f14bdcf005959b5cc3736afb3c0ff09\"\r\nlast-modified: Wed, 18 Sep 2024 16:42:53 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":66218,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"87bf6c283a50cfe2cba200bfcd467fd2","sha1":"a76e3ea57f7986fb6ffb0ff7b9ee3bc8aba99b8d","sha256":"4866e419c03d3538ff5408916fe23fb5fd1391e1e93f90e0464d36ee68251045","sha512":"8d31e664e693f4bfda17fe433cfc08c2dcad4ef80d173ccd6afcb99efc2cccc36f0ba513a2f50165c6cd52535850cf7587c59ae8c1737a40d80ba6b0d766746b","ssdeep":"1536:Ki+6Y1GG4QdQnlYI6D8HvIWqwcFJ3gfwUoI8Tpgdo+pzChH3:Hdn5nvNJGgoJI82pmH3","tlshash":"e053020c7dd0fb421442ae2d8d33b4b30b8664d1be746ac67c6bd12b610f5897e64aed","first_seen":"2025-07-24T15:59:37.722325Z","last_seen":"2025-10-05T08:48:57.513918Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10752,"timings":{"blocked":5320,"dns":5154,"connect":4,"send":0,"wait":51,"receive":34,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/upload/pics/FARMCOVERTCASE.png","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /upload/pics/FARMCOVERTCASE.png HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:46:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 156943\r\ncontent-type: image/png\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":156943,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 396, 8-bit/color RGBA, non-interlaced","md5":"6070c4aaf151be5d9519b15e50d6112b","sha1":"71f6bc135883f946bc8df85e306217f2833e229c","sha256":"a5729c263e12172343018501b7e35d3cc07dc66f4b6ceac02ddbc8d34da8b8a6","sha512":"52a91a70d3b443e1f62bbe1152a48e785536ef09ec007af506ab69b9a17a76284eed6f6ea4787f32e1df8149bd8b92ce4b96b507ac4241bbf1fa9ed3feb747e7","ssdeep":"3072:BWKDRqM2mDeKXsx27MFdW1M0TBgE2x5d6gVExK3aeJBSGUTjaK0HqHapgj5:BWKdH1c6MFdSF7m5d66D3tiGPK0vk","tlshash":"cbe312b2f6afed76813746c30a9146d408d74ae75faccc48e35ac9a938d2165f1d038e","first_seen":"2025-07-24T15:59:37.567838Z","last_seen":"2025-10-05T08:48:57.515439Z","times_seen":2,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bebas+Neue\u0026family=Inter+Tight:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Inter:wght@300;400;500;600\u0026family=Montserrat:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800\u0026family=Outfit:wght@300;400;500;600;700;800\u0026family=PT+Sans\u0026family=Roboto+Condensed:wght@700\u0026family=Roboto+Slab:wght@400;500;600;700;800\u0026family=Roboto:ital,wght@0,400;0,700;1,700\u0026family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700\u0026family=STIX+Two+Text:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026family=Ubuntu:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css2?family=Bebas+Neue\u0026family=Inter+Tight:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Inter:wght@300;400;500;600\u0026family=Montserrat:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800\u0026family=Outfit:wght@300;400;500;600;700;800\u0026family=PT+Sans\u0026family=Roboto+Condensed:wght@700\u0026family=Roboto+Slab:wght@400;500;600;700;800\u0026family=Roboto:ital,wght@0,400;0,700;1,700\u0026family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700\u0026family=STIX+Two+Text:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026family=Ubuntu:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 05 Oct 2025 08:48:26 GMT\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":168063,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9f4180667af79d9da98e5f0763583f30","sha1":"11eb976320bc905be5d787df252cf81d68210a57","sha256":"cc9b055ff33db3fa320af6672d0082e209b4ea21fd8aa82acf3c270b39ebeac1","sha512":"6d7f9e4622fe06b7bb6d67f2c9f1fec5c3514b329fc5c2175e0c3a0819c8123ebd6cf7b50d2afd0d2d861463c9d5680ef4847ebbc50e3a6dfa6627b4fef198a8","ssdeep":"768:pmHcsxXI+dthJKBLfhQE8YTYHw+fQQVNJI6qPdhUX1nkEALW2YjDvsHn1iC+54YW:SwEQ","tlshash":"54f3ebd1042b9500eb871cc233cf7e36ee4e62657085c579abfd1d98aceac261368b5d","first_seen":"2025-10-05T08:48:57.51709Z","last_seen":"2025-10-05T08:48:57.51709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":27,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeP250.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeP250.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 76764\r\ncf-ray: 989ba917eafa5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=85533\r\ncontent-disposition: inline; filename=\"caseeP250.webp\"\r\netag: \"5be1b1b30766517085dfa65c67f2f8af\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:55 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3940147\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76764,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"85cf50652a420a102946a6634250c7a7","sha1":"4675bbb2b485dec6e59d19c0652fdbcd43d3b465","sha256":"929a4ab97b976b4559ac746bf5cae3738d2aa615928c2153032302fd934a5c57","sha512":"da32943a113175a632bca857fe018a1d0471c529ce5948ce4ab7290d9534d50988ce73a541f13518686659a6dc869cc9e17c67976effe1da78ef9f8fd59d5bb3","ssdeep":"1536:KfAjk6Kk4pDFsqXRvkNtE1KU9hlOMdcU8uPbAaPTxbTgPsNXg:Cl2IDFdZyeJ/OW6UAaGCXg","tlshash":"b6730218ec8ddc51bb9c38e1328af8e84a0dacf55759dea7f2992b7cf60415d3938121","first_seen":"2025-07-24T15:59:37.301161Z","last_seen":"2025-10-05T08:48:57.518713Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5332,"timings":{"blocked":5270,"dns":0,"connect":0,"send":0,"wait":33,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseeM249.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseeM249.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 74786\r\ncf-ray: 989ba917eaf95684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=82269\r\ncontent-disposition: inline; filename=\"caseeM249.webp\"\r\netag: \"648044ad3ece3e38ceec6ec8b5b07ca7\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:54 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 2038772\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74786,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0f305fc59297d7aedf81b1a25bfbe9a0","sha1":"85b1ae8671f4585abe8c25b3d5a52960ac800f90","sha256":"fcbb8a8cfe4e9682c98954c125887c2d502acca19a430c87f53cd37fa1df643c","sha512":"7dc21c18fbfe1022fcaf2909f441b869b3d5482f5e2f2ff9adfde19610cf0022610bf1636a9cf16a94c9bcc6b2dfe03c37164077781aea2c28ff029ae01abc89","ssdeep":"1536:eV9e8gWTz59SY726o85S3tpD/f0HRxGooHp3SM6ps1dHj6vIsTDpjYj:eXbHz2F0Sc/G8A1dHuDPpj8","tlshash":"2c73020a6381d4ee27523b6eeda4c2aaeb5239f990cec4dcc3940de576e165e42d100e","first_seen":"2025-07-24T15:59:37.736266Z","last_seen":"2025-10-05T08:48:57.520428Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5331,"timings":{"blocked":5270,"dns":0,"connect":0,"send":0,"wait":33,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/nuke-2.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/nuke-2.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 71708\r\ncf-ray: 989ba917eafd5684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=79371\r\ncontent-disposition: inline; filename=\"nuke-2.webp\"\r\netag: \"2c934ed56dccad424e1f2593c13079c1\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:56 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3704411\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71708,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"19ad32cbea45cb1f9504b3aaca4636e5","sha1":"907ebd0ad9e0aee7461632a242d81a31afbaeb19","sha256":"8db4b2017e0f5b97cd4c6099cf6bffea86f035267bce5b752619c3b5c23760da","sha512":"1b4f4d03df79ff6a57eb62969b359386dc0e4930a6dbf0e07e713a896f697de83bc97d41e4559fdd75d42425798dd7c2ef34a415f1f8fdc06bef9bda58338f1a","ssdeep":"1536:bTjKV4N31+fZDE34wzYAD7xCMyrC5nHWTW5yPD8QiW67hcHAaFi:bTWV6YfZD88sdN31E8QeWgag","tlshash":"5163027046fa62cefa10e17f165f03f26d255e9ad62ccecc2306032999320985a9f5ed","first_seen":"2025-07-24T15:59:37.44462Z","last_seen":"2025-10-05T08:48:57.522264Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5331,"timings":{"blocked":5269,"dns":0,"connect":0,"send":0,"wait":33,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.steamcdn.io/forcedrop/cases/caseePrisma2.png","fqdn":"images.steamcdn.io","domain":"steamcdn.io","tld":"io"},"ip":{"addr":"195.85.59.20","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.steamcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:41:27 GMT","end":"Sun, 07 Dec 2025 15:41:23 GMT"},"fingerprint":{"sha1":"47:00:B2:8C:7E:DA:68:71:EB:F3:1A:FC:68:26:F4:E6:DF:14:76:DE","sha256":"0D:24:0B:14:DC:42:EF:58:04:9B:47:29:38:3B:D5:5D:5D:F1:72:1F:A8:45:4F:9E:77:E6:65:FE:88:6B:6F:9D"}}},"request":{"raw":"GET /forcedrop/cases/caseePrisma2.png HTTP/1.1\r\nHost: images.steamcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 08:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 52346\r\ncf-ray: 989ba917eb375684-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=59416\r\ncontent-disposition: inline; filename=\"caseePrisma2.webp\"\r\netag: \"8411e8eabd40f087e289669c72ed9170\"\r\nlast-modified: Wed, 18 Sep 2024 16:43:55 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 3206981\r\nexpires: Mon, 05 Oct 2026 08:48:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52346,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6eb38480ed3a9ab40b6361ac4be43b61","sha1":"2c9ce2f0bb6be944b14a81ef4dda64e9165bc7e6","sha256":"b969d7b2b1fce891b4caa4d58d99744858758409de3a1b4e39f9a0ff1d6454fc","sha512":"793317597eb0c1520d62d92f86ee5ab015c61e64334f2a7aac144433b16b090c736eac6dbf13305308a539d3fbbf56f7b0d5c199fb008ad77beaa6977dda49e7","ssdeep":"1536:d8G0KIWxt40skAGu9tJnf702VFzNrENzVElQ3:dJ0KIa40q9tJf70YINOlQ3","tlshash":"b23301ded553e4d3cb6bd110bcf8b622da8f002fd804838e7ce1392d54a65995f96924","first_seen":"2025-07-24T15:59:37.409162Z","last_seen":"2025-10-05T08:48:57.523984Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5369,"timings":{"blocked":5259,"dns":0,"connect":0,"send":0,"wait":58,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-case.ru/upload/pics/free_case_lvl5_512x396.png","fqdn":"cs-case.ru","domain":"cs-case.ru","tld":"ru"},"ip":{"addr":"5.149.248.2","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs-case.ru/","date":"2025-10-05T08:48:26.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs-case.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 08:47:29 GMT","end":"Wed, 17 Dec 2025 08:47:28 GMT"},"fingerprint":{"sha1":"01:AA:8F:6E:FA:91:84:1C:B3:3A:CF:52:A9:C1:5C:30:C1:98:E6:03","sha256":"09:64:B5:7F:AB:0B:2A:91:1D:D7:92:47:1A:74:71:FF:42:55:9F:F0:10:13:0B:FE:7F:A3:D6:2D:22:C2:ED:27"}}},"request":{"raw":"GET /upload/pics/free_case_lvl5_512x396.png HTTP/1.1\r\nHost: cs-case.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs-case.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 10:47:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 149948\r\ncontent-type: image/png\r\ndate: Sun, 05 Oct 2025 08:48:26 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":149948,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 396, 8-bit/color RGBA, non-interlaced","md5":"1f93d06565397ecd3686f2c3ed188d91","sha1":"56c044268a89ccf455670394523cf0bdae55ef39","sha256":"4ce50a0a776151a87724dc73a7c62e1ca47260823da7998eba5f5bcf22a65f6e","sha512":"a5488398c217a9b0257dcecda60ff34f5fc6266a04517758247da535346cfec81162c4e75bd22273d4c61fc034d73bea198012d3019f912c5fe1e8beffe7b24a","ssdeep":"3072:oeU9ql9TTX4tV2FxUR6e8yDwEJeTMjNhZSUpBsoEIvYk9NiNONS8q:oeHILMWZRMEsMJhZfmoEIvuX8q","tlshash":"25e312addcee4a4b230816d5d0c050fe34a4cdd76d5db1bc4a0960e99d2aab93c71f1b","first_seen":"2025-07-24T15:59:37.174917Z","last_seen":"2025-10-05T08:48:57.525699Z","times_seen":2,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"cs-case.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}