{"report_id":"0a14dfdb-7f1d-4156-8a49-596d5c779936","version":6,"status":"done","tags":[],"date":"2026-05-27T00:41:28Z","url":{"schema":"http","addr":"lis-skins-cs2.ru","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":0,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"lis-skins-cs2.ru/","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"title":"Лис Скинс (Lis Skins). Продать Скины CS2 и DotA2","dom":{"size":30260,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (655)","md5":"0ed3fe6307352f7a578801401f64e994","sha1":"ff6e7fd87e82864010387f1d3829cf4ff9d300b2","sha256":"4bece41d80df5da7e199bc3f0a77161704c99882072feb359ecadb0e7bf5e2f0","sha512":"6a741be56258fee9de4041595bde6cf202f51f60e057bf4e473a6d3631d803add4b2338d8ae0ac14439e55ac8b1846d4d3d5b9324775d2d8f8a67329568bc53d","ssdeep":"384:FHSVf1QANJrWar1VWbDP7IQfTTb93hkiAHEmom:FH6f1f7rtr1VWbHIQfT/1hcHh","tlshash":"07d2bf2085e134b34013f647e529b9093cde50ffaf265958f0bc69ab3fe18199827b9d","dom_hash":"domhash0b60fe2fdf6cffb7486a96e6ba9335d3","first_seen":"2026-05-26T17:46:16.796946Z","last_seen":"2026-05-27T00:41:31.16322Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"lis-skins-cs2.ru","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":0,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-01T00:41:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"lis-skins-cs2.ru","ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"domain_registered":"2025-06-20","domain_rank":0,"first_seen":"2026-03-10T20:19:04.049541Z","last_seen":"2026-05-26T17:46:16.050154Z","alert_count":132,"request_count":22,"received_data":5651568,"sent_data":10114,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lis-skins-cs2.ru/js/aos-initilization.js","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c4b15dbbc0f214349697bdd9b34f435","sha1":"0a95651d490a06a4d39e516050e0c66e0506ef30","sha256":"eea3e0704c57a45f077e054460b75b021e1aaec5a4f93ebdf47db958ccfa4379","sha512":"dd710f416e7a15aa61a3c5ef51c260dd24cb9e3e733f946d15141147ea2a2db69b134c6062c60a3ae6bd136e2c044e4217639d8546924158de8d5b3b29c2715d","ssdeep":"","tlshash":"3dd052921e96a29aec3ac00102e00a0bc330235f8018846bbb310b882f37402e9c26d9","size":231,"data":"","first_seen":"2025-04-18T14:37:21.885425Z","last_seen":"2026-07-08T06:55:09.357419Z","times_seen":1603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/js/script.js","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"352208b1ea9cfb8ef30b6856e8680b1e","sha1":"4d46c9d6c9abcb81ff1007585009d0b860e6a184","sha256":"31e4f3d1af19b3d784b1f2291180bbe8c7a326f6b6439cc6db32903d41a586cd","sha512":"cffca4ea70565ecd2e021d373dc788c1a925632b9e5d9db19c064c6499c2ed6d53ae18ab2d55b85cbe1d372c974338a323383f2857eac34fbbf16a6b53965400","ssdeep":"","tlshash":"78f0e5e5d4744bb2941697a7eca0963dec4405f55584eabef7388ac21c00727b8e3bcd","size":438,"data":"","first_seen":"2026-05-26T17:46:16.81071Z","last_seen":"2026-05-27T00:41:31.180165Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/aos%402.3.1/dist/aos.js","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","size":14239,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-08-13T12:33:39.171076Z","times_seen":24207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lis-skins-cs2.ru/img/reviews/avatar-3.png","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:06.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /img/reviews/avatar-3.png HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 5713\r\nserver: Apache\r\nlast-modified: Fri, 20 Jun 2025 05:55:52 GMT\r\netag: \"1651-637fa83bfca00\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5713,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"e01a2d0797bb58ae16a1ea2c345575d3","sha1":"50da36549e9b889965176632ee2e064b3f4e0757","sha256":"7f0b5bb1ffb9684025034e1ad51be30c1f88f60b5b44b45b94596da035fa51c2","sha512":"cfc9c747b50a69d41d234d8e7ceb13d61c2a56ebcde4430456ab7f904e538d01ba43f764a2df32a8c961abab48cdf2bdd62b5289cd65c26ec949331e11eac5d2","ssdeep":"96:PSUgWaW0E8j7mh3GiLhL/DMfZ9EwZzir8sVeVdMXo8Qfleu3kkMhAXDqnWsN+F2N:PSrWm1j7eltwfbDZzEVcMXIN0YX2nWn+","tlshash":"93c19e0e484b67fc01581af1a7d92329ff5ef9b08b9fd42f4ce208590b859b5c35a1e0","first_seen":"2026-03-10T20:19:10.125734Z","last_seen":"2026-05-27T00:41:31.164856Z","times_seen":6,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/aos%402.3.1/dist/aos.js","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:06.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /aos%402.3.1/dist/aos.js HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4506\r\nserver: Apache\r\nlast-modified: Tue, 29 Apr 2025 17:16:10 GMT\r\netag: \"379f-633edf4f18a80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14239), with no line terminators","md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-08-13T12:33:39.171076Z","times_seen":24207,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/img/warning-icon.png","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:06.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /img/warning-icon.png HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 720\r\nserver: Apache\r\nlast-modified: Fri, 20 Jun 2025 05:55:52 GMT\r\netag: \"2d0-637fa83bfca00\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":720,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"3617328d7249e32421782f6dd6d1f5e1","sha1":"574be88d66a8641faeab85e791ed1b0ed2d064ff","sha256":"bc2bc0b08a0f8f3dba11d2b340881638e9ac56c08d9d9188c57d26b2fd4a069c","sha512":"dfe338cc06f405d4b5bc688e79fc3542ec8c7c6bedc632bb8b9b4c5d6d80be384592c802005c80704eafac21d0c44320edda04ff10c8cfd07e929de18c76a9c5","ssdeep":"","tlshash":"930160e2a74b062650180ff4325b0a35d8202cdde6ce0617b3942b2ad9439ae249e7b3","first_seen":"2026-03-10T20:19:10.162968Z","last_seen":"2026-05-27T00:41:31.16739Z","times_seen":6,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/img/reviews/icon-2.png","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:06.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /img/reviews/icon-2.png HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 820\r\nserver: Apache\r\nlast-modified: Fri, 20 Jun 2025 05:55:52 GMT\r\netag: \"334-637fa83bfca00\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":820,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"de5457a39dc562a3ec7ecf412f29a1ee","sha1":"3a2d4cf88b1fe7775ed8a984ab0bb552b7956b73","sha256":"7a106600e76fd78385c19faaf950b8d5598f7b6308aeeb66a5b64c5d37a004ba","sha512":"d1a559883d8ca80924af6cf6291505d076f864ca6855810e05fcb0ab252f5a2952cce991ad1ce9ff5465615e349b0ee6cc93c95777eeb70c524a143aa11d30df","ssdeep":"","tlshash":"bc0186e725543cd9fc4c8a4c61aa6d58d5ee3e1c681715b860f87d58722aa0c0952d87","first_seen":"2026-03-10T20:19:10.195106Z","last_seen":"2026-05-27T00:41:31.168811Z","times_seen":6,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-27T00:41:06.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 5678\r\nserver: Apache\r\nlast-modified: Wed, 30 Jul 2025 14:17:11 GMT\r\netag: \"7455-63b262e43e31c-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":29781,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (655), with CRLF line terminators","md5":"da04bb0a6dce7da2e5990a4f788c5aca","sha1":"5bd968ec4afe117cdd8258675b3a368ad535379e","sha256":"b3332916e87d302fe2f760bde7b125edf6d44b40b4bca5b1a6bd72cd6b088aa3","sha512":"fbdb4afb009b216af63da69ac2fb91337415f5ea74cea981bbc2c6e14f61df4b66a366c1850ad9a164a088a7483d0ffff7dfd2f1f5d35cc4a1e5f753456a7e4d","ssdeep":"384:leSVXUlshoZHGaT1V61DPoIbzYTb/bhlhoHKOI:le6XU8gHdT1V61UIbzY/DhkH4","tlshash":"50d28b3089c134674033f64ad628b549f9de40ffaf265559b0fc79ab2ff18188827b99","first_seen":"2026-03-10T20:19:10.207017Z","last_seen":"2026-05-27T00:41:31.171195Z","times_seen":6,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":179,"dns":1,"connect":57,"send":0,"wait":60,"receive":1,"ssl":119},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/img/reviews/icon-3.png","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:06.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /img/reviews/icon-3.png HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 789\r\nserver: Apache\r\nlast-modified: Fri, 20 Jun 2025 05:55:52 GMT\r\netag: \"315-637fa83bfca00\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":789,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"f7d286afc9e1e4d7d13d3a42a0d3a068","sha1":"2fd614018a4b3414849b5d8539d1b48510711fb5","sha256":"1ffedc7e3d368a31c25233f8c6919eeb16ec574f64dba215942ad3825f84aa47","sha512":"e7b2cacd94d1c71cab3010d84c41eb7e6c41054ef6815a939096c03e8c5464c7a9cb6f1ac1275b0b9ae7f292f58592ca8c780e0aa0e818d614c318b8739bdf30","ssdeep":"","tlshash":"5001ca6f4bc544fed20c5c1e143c1b90c16e1f853b81612cb711de041c8665cc41c7ca","first_seen":"2026-03-10T20:19:10.131927Z","last_seen":"2026-05-27T00:41:31.173656Z","times_seen":6,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/img/banner/banner-start.png","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:06.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /img/banner/banner-start.png HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 1348539\r\nserver: Apache\r\nlast-modified: Fri, 20 Jun 2025 05:55:52 GMT\r\netag: \"1493bb-637fa83bfca00\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1348539,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1183 x 978, 8-bit/color RGBA, non-interlaced","md5":"fb9c78c58dae32fdd01845eac1a7d1ce","sha1":"4c6193540f8aaf2d1fdd47086a818ccaee298b94","sha256":"e12e603d753a4822a680067f2f51176ca37e0fb56ac526f491f369edbee2ed3e","sha512":"99cbf01b3e7f4379b2b86ecaf365e2b7ec486544c86c3679e195e210495c9c84703b390d2b4f8763a8d4506cf25cdcfdc79593f2e4d7b291baa12178a4251668","ssdeep":"12288:mHts+xVEeot5sn3tT7HAJ36AsvgVxt5qdVNpWhpc2ltA6lcbFjydxE/kppYInrKf:mHi+vXowgJ36GwdIZG6lgFjyD9ppZO","tlshash":"112533bb9ce20a1106eb1421588c85c3b6641de373314f1279ba587216fadbbd32f9d7","first_seen":"2026-03-10T20:19:10.230112Z","last_seen":"2026-05-27T00:41:31.174978Z","times_seen":9,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/img/logo.png","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:06.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 2827\r\nserver: Apache\r\nlast-modified: Fri, 20 Jun 2025 05:55:52 GMT\r\netag: \"b0b-637fa83bfca00\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2827,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 39, 8-bit/color RGBA, non-interlaced","md5":"b5615971ca3e36f42dacc73e2fd0dd07","sha1":"a0154a2fc522a1c1147e96bd57ae97103d55daf8","sha256":"9065ab62a36ce92f16e2835ba586d6006c0a4c5bb79340c6264567a2ba2f51f1","sha512":"ee94c019e2c707ba9aca7cc056cbf2c0e9aaf8dc7d23c1bf308d3e6aec65d82d07d2774297530de46674136cb1edf8b0168cd337dace2de68a46cfccaaf1f072","ssdeep":"","tlshash":"ad513b786800d6d39e066918a3026cd80867341db85e93d1b9fac182c5b3f11269d744","first_seen":"2026-03-10T20:19:10.149392Z","last_seen":"2026-05-27T00:41:31.178133Z","times_seen":6,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/js/script.js","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:06.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 262\r\nserver: Apache\r\nlast-modified: Mon, 16 Mar 2026 10:31:42 GMT\r\netag: \"1b6-64d21b988f845-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":438,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"352208b1ea9cfb8ef30b6856e8680b1e","sha1":"4d46c9d6c9abcb81ff1007585009d0b860e6a184","sha256":"31e4f3d1af19b3d784b1f2291180bbe8c7a326f6b6439cc6db32903d41a586cd","sha512":"cffca4ea70565ecd2e021d373dc788c1a925632b9e5d9db19c064c6499c2ed6d53ae18ab2d55b85cbe1d372c974338a323383f2857eac34fbbf16a6b53965400","ssdeep":"","tlshash":"78f0e5e5d4744bb2941697a7eca0963dec4405f55584eabef7388ac21c00727b8e3bcd","first_seen":"2026-05-26T17:46:16.81071Z","last_seen":"2026-05-27T00:41:31.180165Z","times_seen":4,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/img/hero/person.png","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:06.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /img/hero/person.png HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 160458\r\nserver: Apache\r\nlast-modified: Fri, 20 Jun 2025 05:55:52 GMT\r\netag: \"272ca-637fa83bfca00\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":160458,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 348 x 327, 8-bit/color RGBA, non-interlaced","md5":"1d3715e8d4660838251e533d1ac514f4","sha1":"21d696904c28181b3062dee7532c4d870145952d","sha256":"bd0b6d2d0559e069224be666492861fd9167d0557da5a65557d3562b2c89b8c6","sha512":"952456b8d88f146180c21200ac071f1d9321f298bdf41d0958ace87716a3973c8f164a5a052f85d8d482dacadff1ef251f5cd1692ae8df5c3c53b6cbe0fa1a89","ssdeep":"3072:Q0+T5NgRN5R5ahs340rxwTvBCHvaHfRuvXE2cimXSPxUei4z:0T5NGP/8slOdIeAs5imXSPs4z","tlshash":"dff32247167900097ccd562726c38b2c934556babb38fa9b5ac2fe6068d3673413bb1f","first_seen":"2026-03-10T20:19:10.122043Z","last_seen":"2026-05-27T00:41:31.181146Z","times_seen":6,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/aos%402.3.1/dist/aos.css","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:06.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /aos%402.3.1/dist/aos.css HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-type: text/css\r\ncontent-length: 2236\r\nserver: Apache\r\nlast-modified: Mon, 19 May 2025 06:46:46 GMT\r\netag: \"65c5-635777edc2180-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-08-13T12:33:39.170216Z","times_seen":45079,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/js/aos-initilization.js","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:06.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /js/aos-initilization.js HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 152\r\nserver: Apache\r\nlast-modified: Sun, 25 May 2025 18:22:58 GMT\r\netag: \"e7-635f9ebb68480-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"3c4b15dbbc0f214349697bdd9b34f435","sha1":"0a95651d490a06a4d39e516050e0c66e0506ef30","sha256":"eea3e0704c57a45f077e054460b75b021e1aaec5a4f93ebdf47db958ccfa4379","sha512":"dd710f416e7a15aa61a3c5ef51c260dd24cb9e3e733f946d15141147ea2a2db69b134c6062c60a3ae6bd136e2c044e4217639d8546924158de8d5b3b29c2715d","ssdeep":"","tlshash":"3dd052921e96a29aec3ac00102e00a0bc330235f8018846bbb310b882f37402e9c26d9","first_seen":"2025-04-18T14:37:21.885425Z","last_seen":"2026-07-08T06:55:09.357419Z","times_seen":1603,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/img/reviews/avatar-2.png","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:06.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /img/reviews/avatar-2.png HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 5210\r\nserver: Apache\r\nlast-modified: Fri, 20 Jun 2025 05:55:52 GMT\r\netag: \"145a-637fa83bfca00\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5210,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"3274c2dfdaeaf3b31b424ebdac8fd386","sha1":"1c3ef60caea044ddc54ca57370fe2350ba833db3","sha256":"96fd9f95fb0a66998b0787513579879ae93853c6b0b2ab6c756b81ce7cdf3a6b","sha512":"40601b05940d79ffdf8d12bf909b5838ef4a4bae96618212e3a0e9b8ceb5145c2135e0b1467f01003f5bb282b5aa0c8fb1039bdb1b34c2ab02c454dfcd1c159a","ssdeep":"96:PSEwFnYk/9L9OEQ1aCXggTj8eB4t4r9cAzxvrNs9TRBQv8WDMAm8:PSwk/9LY4SggTjPqt+6sxzi9NBQkWZm8","tlshash":"11b17d6d2bbba77d358543b313d50161411e1926b56b46698640846dfb136a3c2c8b8b","first_seen":"2026-03-10T20:19:10.214279Z","last_seen":"2026-05-27T00:41:31.183454Z","times_seen":6,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/css2","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:06.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /css2 HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-length: 26167\r\nserver: Apache\r\nlast-modified: Fri, 20 Jun 2025 05:22:01 GMT\r\netag: \"6637-637fa0ab13040\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":26167,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"06da23318062ac53796ec393a7222782","sha1":"9156236eb441a3df6d7611194f329548e62a412e","sha256":"066eb6bb4ee0b482589cebc87f196c5406e2a00ad206a04a174f2d9737b95bd9","sha512":"9ff1d7a79930b447145c0f9898038e6acc4feb4668d8f05404bd00c8f1a38b7fcd822360c5100dcf2b318301de5011561495b53009bc88ceb958a82b3c191ba1","ssdeep":"384:G3O393V3f3P3y3UcjL1FcuR6y0kdn/4QOe3FZqS0ENHKl9HXiUaR5TDOoCNlTDCh:2+phPfypW4akwJG","tlshash":"c7c28a50402e57a1dd651d6d37cf2f2d2edc288d2887c5bc17710ca69edb8aa8345fac","first_seen":"2026-03-10T20:19:10.136636Z","last_seen":"2026-05-27T00:41:31.184069Z","times_seen":6,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/img/banner/banner-end.png","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:06.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /img/banner/banner-end.png HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 1274276\r\nserver: Apache\r\nlast-modified: Fri, 20 Jun 2025 05:55:52 GMT\r\netag: \"1371a4-637fa83bfca00\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1274276,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1140 x 978, 8-bit/color RGBA, non-interlaced","md5":"ce0c9fdd06a61f71a2d10facae8dbd3a","sha1":"b0c0b3fc05dc56afd7ad037f1bfa7722e5d2e824","sha256":"ab3f04a077de1f572df7a46cd5c8955d6d40d95a95326a23e997b904449ec1c8","sha512":"fee631200880f3bdfcf05bf5da57f0f409f4d3ffb3f07bfe9cd93ac1297b268f3eb07f922d6b23262eaa83932376547d0e12215fc15d893b3bad07cd2f99ec5d","ssdeep":"12288:IzQ/cvW2DOsn8NiY89x4cju85ylonmsiPaYbXYVxTHujw/lIoRWUqPpmdBOJzzYl:NGbgcjM+nmsiPjIPVl+tRGoJznK","tlshash":"032533bb059609d7b5ffeec918cb0f23362dc42c55a847249980652f83f9a30e6a5dcd","first_seen":"2026-03-10T20:19:10.217297Z","last_seen":"2026-05-27T00:41:31.184632Z","times_seen":9,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/favicon.ico","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:07.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:07 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 190065\r\nserver: Apache\r\nlast-modified: Sun, 25 May 2025 18:22:58 GMT\r\netag: \"2e671-635f9ebb68480\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":190065,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 9 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"8449532a2ffdb4b0a3998a8b7b750577","sha1":"68da47a5390e02f4182857980a074770a73fa62a","sha256":"1e42b103f222a39ac56b3e06a24723350c1d5ba59453d54c48fa10177f2e9428","sha512":"b44961876397dc77ae7cc9c58cb13172ff071ace35bcc9b5785dbd6ea2d39375f0614d6218b5aa48073cd029c5421603d34b5f2c92ec29bc8ecfd8e242c57c33","ssdeep":"1536:V59g4MepN0SwCftHHbK4v0HZ2YMl60y9u+ZfS7aOvXEtGOLCcT:Hix0mSwCftnb/v0HZ2ncB/ZGam0h2+","tlshash":"38045d9727419026c8d00f3cf2aa92b2871ebe416e7ab4f354617e59317d660e1d2e3f","first_seen":"2025-04-19T14:33:39.429428Z","last_seen":"2026-07-07T19:57:55.070283Z","times_seen":30,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/img/reviews/avatar-1.png","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:06.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /img/reviews/avatar-1.png HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 4662\r\nserver: Apache\r\nlast-modified: Fri, 20 Jun 2025 05:55:52 GMT\r\netag: \"1236-637fa83bfca00\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4662,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"080565248e09ca0971643fece7267141","sha1":"b264e2fd253fb7e95a2d41b18a3106ecde6ae8f1","sha256":"ba568464851d1fa69709165baa381a8e6a9db505841401f8f4d048888a68114d","sha512":"a308f81238f79a2a1b29b135330ae9e78065fb97a199a5fdc7e9ae7aed8527a0ad5ea7db3091b416397967a37410b6322f66e7f8daeaf35da80364fbdef16a10","ssdeep":"96:PSNmUx+MH6XzDhh9Y2blCQPjeUCZ9/nJjCQORegzzj5brFPGrpu:PS0XaUz1Yj6c9/9OkkhbBPGrU","tlshash":"d8a18d7033e26543ee6e66e21cd917c809eb4c542ad4a488be383831c3632f16de9807","first_seen":"2026-03-10T20:19:10.210562Z","last_seen":"2026-05-27T00:41:31.18593Z","times_seen":6,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/img/banner/banner-center.png","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:06.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /img/banner/banner-center.png HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 2452553\r\nserver: Apache\r\nlast-modified: Fri, 20 Jun 2025 05:55:52 GMT\r\netag: \"256c49-637fa83bfca00\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2452553,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2080 x 1125, 8-bit/color RGBA, non-interlaced","md5":"2d9d84bc530810f3e63741bc50869378","sha1":"f7c008efe38143c4c0c591d5126a4fd83bb54e1a","sha256":"0c00638ffb2b3600575d4e5b65e4aabbf591ad28b4f8baf3ec2394149a45ffb7","sha512":"d476f3a2849251b868b7827b60dcb8f8d9caf890256dc3fba5ea2f006639ab6148bb4660649504374dec5975227f24ddf267ec634b56b36670f96e101ce2c339","ssdeep":"24576:CvabJqtxAnpyQbQG5yrKdB1fBggyFgDzjYh16:RFqtxKphMG5F5pyh0","tlshash":"822533e1575be2709e4f9ec9aec0e51e7041bb1b8c760cb58db5ee2abf37a251001532","first_seen":"2026-03-10T20:19:10.22446Z","last_seen":"2026-05-27T00:41:31.186721Z","times_seen":9,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/s/robotoflex/v29/NaNnepOXO_NexZs0b5QrzlOHb8wCikXpYqmZsWI-__OGbt8jZktqc2V3Zs0KvDLdBP8SBZtOs2IifRuUZQMsPJtUsR4DEK6cULNeUx9XgTnH37Ha_FIAp4Fm0PP1hw45DntW2x0wZGzhPmr1YNMYKYn9_1IQXGwJAiUJVUMdN5YUW4O8HtSoXjC1z3QSabshNFVe3e0O5j3ZjrZCu2.ttf","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:06.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /s/robotoflex/v29/NaNnepOXO_NexZs0b5QrzlOHb8wCikXpYqmZsWI-__OGbt8jZktqc2V3Zs0KvDLdBP8SBZtOs2IifRuUZQMsPJtUsR4DEK6cULNeUx9XgTnH37Ha_FIAp4Fm0PP1hw45DntW2x0wZGzhPmr1YNMYKYn9_1IQXGwJAiUJVUMdN5YUW4O8HtSoXjC1z3QSabshNFVe3e0O5j3ZjrZCu2.ttf HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/css2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 88912\r\nserver: Apache\r\nlast-modified: Thu, 29 May 2025 22:54:50 GMT\r\netag: \"15b50-6364e2f596280\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":88912,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 24 names, Microsoft, language 0x409","md5":"8f45850d76c7f2021a3489d14a321c2b","sha1":"141bf26386ac7fa7a59b023650f2a502c9be32f7","sha256":"f1ad5ed3131510cc8fb647844b857ec29c2aa92f963b48e4f6725cc7e26d6d48","sha512":"32fa7b27b51207befc10531ec5ac8d46e2cea82ac82988a9029dbdbb5af4be6a302b87c85d74f00e6f78ef4fd009dc4c29a00233f0982cc1b6740d46e3ba7d93","ssdeep":"768:G7jiuqzLBudWj/8jfu/yVMwi/NZ6Ezp8Q1Y7rlBt7FidvHQ83fiROhQ4YH7k2vq/:GqOPu/IMJFFuh7Fi9HoOI0Q4C3uwk","tlshash":"f5933b03fb13961bc9061ebd87a683d037b47c240a16462bf5ba7f5ad44b5f82e6a4c4","first_seen":"2025-06-25T20:41:59.387772Z","last_seen":"2026-06-29T11:03:31.715513Z","times_seen":53,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/css/style.css","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:06.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-type: text/css\r\ncontent-length: 1974\r\nserver: Apache\r\nlast-modified: Sun, 25 May 2025 18:22:58 GMT\r\netag: \"2fc0-635f9ebb68480-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12224,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"df447dcf6417450ba7e964643c6259d3","sha1":"feb7cc77e4a73354b6f15038b7ed3a81367a6d1b","sha256":"63ff802d64da8cd420165a40296a117cfa759dded7350cdc1d71986ad137eaa7","sha512":"5bbaafd9bc9a9318fed3a9f11d93c7e1299b016eb1f8963214281e4c538449e46e5020887511615de134608bbf81d374f21303c40c2ba6b8feafe036f279412a","ssdeep":"96:c9VqilnxMxavE8FjCLEKfZh4NZFOZJu/9EBzECrXpVpEWsmxx5fsJXKpE/HiEX3g:/uvPqEGZh4fFORHzf75ZBZwir","tlshash":"8442d0136ad1650078178caa77875b6663b84413850afafc3dfb601c8fda6e5c59338f","first_seen":"2026-03-10T20:19:10.186752Z","last_seen":"2026-05-27T00:41:31.187884Z","times_seen":8,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/img/reviews/icon-1.png","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:06.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /img/reviews/icon-1.png HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 738\r\nserver: Apache\r\nlast-modified: Fri, 20 Jun 2025 05:55:52 GMT\r\netag: \"2e2-637fa83bfca00\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":738,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"64fc8ae70619f7daf17534c8f3b05b5c","sha1":"e05de7a36d916ef25e103976f485f2e886b69d03","sha256":"cf2a9ad45593cdf24ef22ee28b5263201cef44c705a8a28d488da9e368d95142","sha512":"dde621f4c223822acece3b21073c0d8626bc49e8c3d6ab5cbfab789a374849682bf98c0cbc73a218a7d22992f6baefc183643fb62e6122c49dd6f5f66f047287","ssdeep":"","tlshash":"0c016ae30e6e7fad47560cd159851641e6bb06e6d2e60501d8b02c77293dc281d09fa0","first_seen":"2026-03-10T20:19:10.180275Z","last_seen":"2026-05-27T00:41:31.188471Z","times_seen":6,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lis-skins-cs2.ru/img/reviews/icon-4.png","fqdn":"lis-skins-cs2.ru","domain":"lis-skins-cs2.ru","tld":"ru"},"ip":{"addr":"195.161.68.19","port":443,"asn":8342,"as":"JSC RTComm.RU","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lis-skins-cs2.ru/","date":"2026-05-27T00:41:06.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lis-skins-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 03:17:40 GMT","end":"Wed, 15 Jul 2026 03:17:39 GMT"},"fingerprint":{"sha1":"C2:51:90:A9:3F:5F:31:5E:67:47:39:A1:61:25:2A:E1:4B:6D:3F:98","sha256":"D7:01:DF:88:2A:70:D0:5D:7B:85:11:9E:0A:86:5A:1C:4D:8B:25:37:22:C5:7A:18:70:46:59:35:A0:6B:10:AF"}}},"request":{"raw":"GET /img/reviews/icon-4.png HTTP/1.1\r\nHost: lis-skins-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lis-skins-cs2.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 681\r\nserver: Apache\r\nlast-modified: Fri, 20 Jun 2025 05:55:52 GMT\r\netag: \"2a9-637fa83bfca00\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":681,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"1fe795800123f0a89311b0fbb60221f5","sha1":"b3908d5271bfbf8fc258d0c11c7bb1e71e5808e5","sha256":"e1ea5350bf53706a85ddfd7cf6df2205fd3f0072b34519f3e6d51a09df8c1ccd","sha512":"83723908fac49a7302c21f763d32b072f6201e010041073027e65abdcb810392841a62d65c3edc41f25cb54eab72686fb874b5b12441f44f31ad242aac7047ae","ssdeep":"","tlshash":"e90144d5b268836bc2e92cf3922b432c946f06eb140651494e315c38a3224bc0709d72","first_seen":"2026-03-10T20:19:10.221234Z","last_seen":"2026-05-27T00:41:31.18908Z","times_seen":6,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-26","alert":"Phishing Block","trigger":"lis-skins-cs2.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"lis-skins-cs2.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}