{"report_id":"36443351-f82f-4430-9af8-61165ce7d08b","version":6,"status":"done","tags":[],"date":"2026-03-15T14:16:49Z","url":{"schema":"https","addr":"case-battle.net.ru/","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"case-battle.net.ru/","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"title":"Case-Battle :: У нас выигрывают крутые скины CS:GO","dom":{"size":106,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"e44de33b775a6ca866776145aafd3c78","sha1":"a9079dab1e89170b39c1da665c53e733b00c498d","sha256":"efd4595fecc095473a8a523dc934dfcbc565075ce46a4c662563112f0f878839","sha512":"a54a60a1b1f2e04fcff54ccc8641bbe5d0aaa1d1395e7ba515609afe36dbab28a910cc7522abfc8c2f7afd18914f27f0210fc6046aad8a04912ae09bc05a6bdc","ssdeep":"","tlshash":"6db092f56412000aa620aba089daf20849408511e0098c40a49031ec848c609d8a3690","dom_hash":"domhash5e6292264e4e9b437727682de9d4390f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"case-battle.net.ru/","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-19T14:16:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-15","alert":"Hunting_JS_WebAssembly","trigger":"case-battle.net.ru/index_files/modern.support.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"desktopfiles.pro","ip":{"addr":"89.19.212.52","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Poland","country_code":"PL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":404,"sent_data":557,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"case-battle.net.ru","ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":103,"request_count":102,"received_data":5551046,"sent_data":47073,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"cdn.gamecontent.io","ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-11-17","domain_rank":0,"first_seen":"2026-01-08T18:04:40.828929Z","last_seen":"2026-01-26T15:47:25.598891Z","alert_count":0,"request_count":48,"received_data":90326,"sent_data":22615,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":10,"received_data":369726,"sent_data":5602,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.me-talk.ru","ip":{"addr":"185.71.66.141","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Russia","country_code":"RU"},"domain_registered":"2011-12-30","domain_rank":830529,"first_seen":"2017-01-30T10:44:36Z","last_seen":"2026-03-11T06:37:04.0059Z","alert_count":0,"request_count":1,"received_data":738,"sent_data":528,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"admin.verbox.ru","ip":{"addr":"185.71.66.141","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Russia","country_code":"RU"},"domain_registered":"2016-09-09","domain_rank":1933999,"first_seen":"2017-03-12T09:07:00Z","last_seen":"2026-03-14T09:58:07.372733Z","alert_count":0,"request_count":1,"received_data":12964,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"192.178.25.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":1,"received_data":23862,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/webcocket.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cd559da7442eeb7066e5dd61b70f730","sha1":"7db58b91d5f2c91a2d8d9b002457419c4be8889d","sha256":"1ccd5ae04be72f7e0a2aad1ad5bcfb7f161b83d5e98632248be012b3c42bf3f5","sha512":"7277c98166b5f18901020080e50015505155b0b218f9c41326a989efe3ebd65a180dec5325219eb569f5f1670a03594f951438c701d5049a3651f55522312aae","ssdeep":"768:A4kVHI8iIGteNh/120zI6iV1GWDABlrpFZ5p8wn9+2CEXp36ojoh5/c1fJGp:Ib/dVoh5D","tlshash":"191332095a991caed71672247ccb3a47204d113b9ada8e8874dccbd0dfe87d8212777b","size":41568,"data":"","first_seen":"2026-03-15T14:17:01.583411Z","last_seen":"2026-03-15T14:18:05.450233Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e20295f315571fbf02e33257b31f70dc","sha1":"a6c6a4627096cfd35251c6486b5e3c28a367d8d6","sha256":"a01f8de64cabd50f638e2b6069f3940d9ee5fd47712a56f0535c67b1e429e3a7","sha512":"60146f3c6d36402e0d1badf8dd437018c84382a437110cc7d3182c4c3ce91aa50107de1be07a5fdb506e901d21caaf01c1e3c3fb1d027e50db503be918a13fbf","ssdeep":"","tlshash":"abf0ac47845748a34cef4019c327711e80dda23bec3ea421fc150a605f3031b16916f0","size":604,"data":"","first_seen":"2026-03-15T14:17:01.672227Z","last_seen":"2026-03-15T14:18:05.514374Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/modern.support.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3369671a0c04194e159ee3b4e9083e15","sha1":"a0c68f68463a1f86b014980518c93b0d32407899","sha256":"3c8010aba806ccddf2baebade3b948270c8764070a1f803c11fea723d6e773d6","sha512":"44d253d9501c11dcbe436f8d97080ffc474eeeb67ebc1bd23021e23c925df253e8aaa5091ab8605a3f4cebcd851dfeb8696663b719d246530b28fc2acb2b62ad","ssdeep":"6144:1nynt0UCLf3SW99XC+q5osQeJ0OWpS7LXpegV1y2izjfUPNHbYJQAmQ/uQ8OcRRh:cOOWpcD3PNBF9kbV4BimHY+rOi","tlshash":"def44c9672c2742313af05b7d06b2118f73e159929090c78f328bae63e55eca9176f7c","size":728257,"data":"","first_seen":"2026-02-03T09:11:57.459525Z","last_seen":"2026-03-15T14:18:05.511923Z","times_seen":54,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-15","alert":"Hunting_JS_WebAssembly","trigger":"case-battle.net.ru/index_files/modern.support.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/SVG-062b764d.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"ebb2e9996169ae667642f11593e667d6","sha1":"01a65e258951d9acc1068b3d7de0729681e3cf14","sha256":"603d888363930c99da5e25278832b60798bdccff993124a9bb7262f7ac702518","sha512":"73957e2689e9dc9cefdf3246805ccd023f0350db45e9b61e5380fe120f623e44f7f5af01e59dbe640543af2cc68e53b5193e935a6465db2ebeebaad4c2eb4821","ssdeep":"","tlshash":"ad21814ee473b3be957828d07164a04053034927cbb08ab181b928b624fc34862befdd","size":1270,"data":"","first_seen":"2026-01-26T15:47:31.240947Z","last_seen":"2026-06-15T03:06:03.090284Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/enums-afffdb60.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"c62c8c8e273458be30103e0e5d5c2cb9","sha1":"0b2794fd523e0e49ab13ee440ae28e404ee24e56","sha256":"38effee3988d6139bc9e9df5481aaadac5d0804824b726c5da21a8da1fee904f","sha512":"0ce21e01cf1621563fe8cdd95b7c3145c1208f9d4b4cf403f3c7c61e0cb56667eb49e4f677216dd7e4e9401518f576b9b0a737083e165a4ca54cd63c20e82b23","ssdeep":"","tlshash":"83515459746affff99432da330275242223509ca7a244374aed6631212d3e84e7b6727","size":2509,"data":"","first_seen":"2025-08-05T19:46:08.978753Z","last_seen":"2026-05-06T21:40:13.89616Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.verbox.ru/support/support.js?h=8210a71e65c7008a8529b00a3c7397fe","fqdn":"admin.verbox.ru","domain":"verbox.ru","tld":"ru"},"ip":{"addr":"185.71.66.141","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c0ed1563d1b7fe190c7c2ffc865f0be","sha1":"7ce9bb52cb80082608c8eea1cf5669f76a5a9cb2","sha256":"058b036843fe1fb45fb5a558a6c0788ffb00b3a713048256663c9728f12e55f9","sha512":"b6690edb14ce989249a3ad7922c1eb987780d7b07f515b77c3a12d3ec74e96625636767ade63b5c8bf11a8314cc15919d211ab09ee3f995adf92b5d1e2874e67","ssdeep":"384:3j5GIKm/prTzS96d0A3fbtwKEu8k053515b0CjuHNi2Sc:UIKmlna7uS3Ttbxc","tlshash":"68422ac8396bf4b707ea5085043f2507f2780ca8541adc98fb05cc9678b49ab86aff74","size":12658,"data":"","first_seen":"2024-12-01T03:25:27.864449Z","last_seen":"2026-06-15T22:00:16.51051Z","times_seen":1067,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e628ba8c6620c01ee44d0e209591f3a","sha1":"323b1e2586617f41a73973f2282d8e3b48e75e7c","sha256":"93df71734803620185f76e74033c69f0805a5158981314050fc644f9176613ff","sha512":"22501a2e13c0145530de935440720bc783c92e45a3ebd770ae64a8b0ef864d512b5c00449c26aed77a274027087e0b4223bc0d2565ba9fe7a73bbb606e7fbde2","ssdeep":"","tlshash":"1af0f63825b5243a542732aedf5ba3cf6951416fa40a8e0d389c8158bfc9a320af15dd","size":587,"data":"","first_seen":"2026-03-15T14:17:01.67389Z","last_seen":"2026-03-15T14:18:05.515559Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b97448f17ea56008831d01d99b04ae6","sha1":"eced7185eae602c2f2eb4cb5404ff41c31a27f58","sha256":"9dd2c85697aaed4b1f7da5664450b112639b0605783ac7f92796ed38f1221177","sha512":"ec1335adf205a83b99d606a5a4695e7bf2f3119b1371ceb4952906cee913cb06c063cddf30e922f9434c078d37861b1fd285b0f5a9fc14d84cb9224dcb6cc3f9","ssdeep":"192:+LxnB4DelwkYfsgFvDRKEJWuLl6EWYSti+gRiuRziWZkL4g:COjBFvRWKl1++YLp","tlshash":"44f1e82348d20c6ed6c1ae0b2d969f4c4f3e01b5bff278d450ec1e8a458775e4eb456a","size":8092,"data":"","first_seen":"2026-03-15T14:17:01.675431Z","last_seen":"2026-03-15T14:18:05.518453Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/hystmodal-f2d302d3.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"53e3f9647f65f2ad99a6bb948ef3b38f","sha1":"d3d3b8b0add4a95b2d6acdb5d3a2896b899ea521","sha256":"281cbeb38feb3fe589ac96bdd7454a988a18f5d88314cdf5da10a920c0839e7e","sha512":"b5f8af315c10151d06fe6bcb580f99c54a660d077f91fabbdaa1246793376ddafd679437194e81b8ad8010ea45842dd8b6cef4f7d9ea841f662e888118d27ac5","ssdeep":"96:ezrjuSlXQBaMHFsHxaINeih7QkEzF6mnd7ui8:KrjJUaesRnNeih7QkqF6md7ui8","tlshash":"4bb1522ab23854ba04fe895ba2b65b53f32468947407001d7839dece1a4fd877075bf8","size":5362,"data":"","first_seen":"2026-03-15T14:17:01.351702Z","last_seen":"2026-03-28T19:42:48.537584Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/_commonjsHelpers-ecffabcd.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"b492617b955c6fbf9f992c8269dc9a27","sha1":"20e21179cdaba64d059eb5c31c1221ab541bc685","sha256":"48a8259b7a1c5172223b014481ad43ed19c503615166ed14c6f3972062cd3e52","sha512":"5925dfc85ba7bd993005501fe1c9d10851a3d0ac575aa422d19a37fd0258a7f0aa50aa0e09731960b69cc3c92d111ec2d1de13fcdff1fa9ba51263f3a78f6a0e","ssdeep":"","tlshash":"afe068d0ac4000f0763900acd37b500be25294bf13dc02b0c32c0e3aaedc2f8821e6a9","size":371,"data":"","first_seen":"2026-01-26T15:47:31.235583Z","last_seen":"2026-06-15T03:06:03.055048Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"f0d53fbf9b635d37555e4f9f04b6bdde","sha1":"d6cca2b67192ccb597a443a85c665c4d3ce4dd33","sha256":"413a49dfb658389e9c713a5dbbc29cd4b89f5aa22f24af8560f53248a5e0c71e","sha512":"0fa3059b42d7c8672368639e1c84c7ee64516732a9c4d6496a20f0d39fa3697dfb418002ce21ae1d7654c2eb14d9099b6780d5cb31a7e6fbcaa303b9a91e3ace","ssdeep":"","tlshash":"25b0128e3a83a00445e30154a0e5d8a4d02834606404ccb4c04ceb50185eb38b619908","size":91,"data":"","first_seen":"2023-05-12T09:05:57Z","last_seen":"2026-06-15T03:06:03.258544Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/notify-09240109.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"4a844dced0e59328b8f8a935f94ec0df","sha1":"105061409c7876fdffb02eb2037aaa01ed151655","sha256":"1fda4f20a035cbafb17db670173d8e54c1387fb732b1f43156c30750e40e7143","sha512":"20032756ae740e2634270399b5d77136421bebfa0703d51973cb5190b3384a969362f9e809f369abe817174c15736818691b7cbf4a7d3b5ad00f168570596b98","ssdeep":"192:1szfiWY/EGcdBIpPlgtVkCTqfBxthMyNjskb5ClSmgPhU80w0:yzKWobMEhMyZsk1CZgPe8p0","tlshash":"a342958463655b2b03d781abb8f95254f231d1f44069102cf9bceedb8995e81a2ff3b1","size":12234,"data":"","first_seen":"2024-12-02T21:43:54.628213Z","last_seen":"2026-03-28T19:42:48.601848Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/index-9ccd359e.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"bbeabbec08974e7fada73a157256a1fa","sha1":"f72a529dbe00c5b2e940fa7859bfaecee92f80a5","sha256":"7ee4af3b53befe68dbbcc0819c6828fdb95289ac86f8be1c20a46a3d32ade00d","sha512":"776831f3cc25483a09d0224636e4a35c23f88973cbe8289c046a05815f98d2d86a08251eacf4ed62c77d752f6d23facceba36b6b53248c953901b34bbf28d028","ssdeep":"","tlshash":"7fb02bccb00067f1934903a1041f040b951c8460301dc780c240a1c42b31120c93fd4c","size":121,"data":"","first_seen":"2024-12-02T21:43:54.581917Z","last_seen":"2026-06-15T03:06:03.1018Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/api-3987d970.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"4f9587d0de4ceae9ed2caf4085f8dabd","sha1":"d8282229105c40b1e8374fa92aa03d023c36087c","sha256":"8e9f54db2cf4a3cfb9155d8463e9b99d78f41410655207d391c85d3deb4372a1","sha512":"14477af3749a8c9cf495bc4d5e7ce2e1a891a81b5ea32684bec6bc0878353d4be4119374592999119fb4e4186cb02390ae41567c83d222168090b9eaa1f3b978","ssdeep":"768:nJ8mAkFPst7ELPiUgU9QDl9uHltj6LKQcSluawKMni/zFu51yqOiFyQ+Ax3xE/bo:kLKPqxduF3/Yxjteh1jP9","tlshash":"78f219d576d1b06153aa64f680ef0506f339961d740d84e0f128acdb2cb510e9bbbf79","size":35835,"data":"","first_seen":"2026-03-15T14:17:01.666159Z","last_seen":"2026-03-28T19:42:48.60126Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/api-yUUW1LL4.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"df891bc962073d9d6dba5235a64519d5","sha1":"8c1f6121c0842cdcb0be5b154f403d7be2f1bbcd","sha256":"fdf37e1aef1649963f578b58e8cd6a711b34cba269c7c53e2732845a4104333c","sha512":"a5bd917c55f45ac982fc7661f90ed6659e34d73debf9dbdab82b78f719329f2a529f526905cf592881865e67638a57dc2e67087aa2cd60c49de74f321726505d","ssdeep":"768:f9XEahb3Y+eWuPPr5RjWKlVeZ6VwviKl/PhSgqaFyO7i/zFu3I4QOfwgQ7WR33Ct:XVl/Jb8fuQKHI+prHEctSR","tlshash":"e2f24bd57691b06113aa64f740ef0506f3399519b44e84e0f1286cdb2cb520e9bbbf7d","size":36245,"data":"","first_seen":"2026-01-26T15:47:31.320644Z","last_seen":"2026-03-15T14:27:38.918539Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/utils-672d59ec.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"a12b459b9ac3f8dc9b2642f4702444dd","sha1":"c27c65e9b2cc7dffe85d9924be2165218dbd1f67","sha256":"3b57259b52b1dbbad0f032f4f63551d44f8e100df1e7c3bcef8154c6934e8e94","sha512":"7ebe14f359b9da774ed693d0cc7180b8f12e3f73baca62a37616b90385f37a7a25f9520f304b6b7616bf1c3fa09cca98625df40e741479efadeb6377a7dd280d","ssdeep":"","tlshash":"674163e93384b477c397106294ff461bf5386ac4694b2019c06cb4d23e22c309bf7d99","size":2203,"data":"","first_seen":"2026-03-15T14:17:01.563044Z","last_seen":"2026-03-28T19:42:48.563864Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/index-044fc01b.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"c3c3a916c4da76bedb22e640dd00efdb","sha1":"3db8825d4dccc5284352e6f052e35d95c4418d47","sha256":"d7b621280ffcce085e9c1c3bb086fc0f5a55b3d934eab236bcee959f6416568a","sha512":"74826d7ac6d93c25b94c80711ea66672865ed00a717ba52fb3e38881ba8390324c9b464ff6a9551e65c2d1ae5117795164a22c8426cfa9a2a8413b0a3da92693","ssdeep":"","tlshash":"d601ce9c7a91b0be85940cd080df6865c6399c063146e94485b4ac47ae33bee619bb4d","size":792,"data":"","first_seen":"2026-03-15T14:17:01.59676Z","last_seen":"2026-03-28T19:42:48.646003Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/funds-form.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"490b7759d959fb704d53fe9ae12b6131","sha1":"2beb3e3bfbfcb4bbb8728e1610eeb5e003b99e3b","sha256":"0dfad1ecf9af2e07cc8889ed8bc11ef1d4bce9c5fe9ff74714caba3af845db04","sha512":"87ad0440b89998aa21c2fce2fec209e66dcfa5d6f4df575438a403b3ecc0cd027dd8f916f1eb0800b0ff5337d5ce574d8f959315011f138db5cf27aab054f058","ssdeep":"384:zL3nJEbxLbD5eDdndsaD0ETWOPSMxB6YIOy+vDS108ul4F4sGuskLc9LQtJL3e:/JEbxfCdnPYXMn6pmDQ08ul4F4XuwcLu","tlshash":"7ce2ea857165b1bf162f48ab54ab4001f33164566c0f4d40eafcac4639a8b8c56fbfbe","size":33167,"data":"","first_seen":"2026-03-15T14:17:01.573766Z","last_seen":"2026-03-28T19:42:48.632872Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/index-512be0f5.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"01356655de9fabe6ddb7dc45b145bfc2","sha1":"4415dce775eeba55c2fa0132a3af45a3822eebb0","sha256":"29aa1d7fcf4d8b7b832ecf2ac618c8a5fe3e036b905796593e58a52624ebcf42","sha512":"49c07e67b19811c1571f95e22e704829b7c5a90f59ca8559b5b71293d89724ab2370a063a74c1cba31125681b55919f8fcace7cc117bbb329f491a43df8c9d6e","ssdeep":"384:wf70pCb4BMYWYWvxg3PJAvr9xHbG+59uH8DrmPR+V/VtfT7v0K:wf7/EByvxg/JAvr9xf59uH8DrmPR+vtR","tlshash":"276273ad3680b17657a644b690bf015af3347544340780a0e17dbcdb3e726ae46ebfac","size":15632,"data":"","first_seen":"2026-03-15T14:17:01.637485Z","last_seen":"2026-03-28T19:42:48.606817Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bddcf015ee90982ce19f5cf1ff93d648","sha1":"531080eb48329a9a87e2f341045395af134e159b","sha256":"a603cf60b5dcc411345ce1be9c7465ba28b159e26a767862ce5b79ddcc1079e1","sha512":"475eec104d852c5e312ea19404d4d96096cf9270c46bda46a90b2db19c373962efe3af2c43582f12c59fe37f6b19d4cadc4c5d165ce91213770f0d6e0f88ac77","ssdeep":"","tlshash":"dcf08b4668733038862720e8233bad1b9922591a4e40d016b4f59ad91f70a63ca428fc","size":549,"data":"","first_seen":"2024-12-02T21:43:54.637378Z","last_seen":"2026-03-15T14:18:05.519552Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/live-drops.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"58f3f8fc635ad3d216969e88b3896e14","sha1":"a7909db66e4ca65c8c57a7a525b5e6bdcf6b7846","sha256":"6c73a8e55e6a9d6a08e932d05bfb7a9c20887bacd6caecb424ca3f4d470b1e63","sha512":"8aaf4203bca93a0bc719592dd80d343c1f14f31f088cdc761f9ad0033501c7a362e44f6aaede9f7ba4b88c79e694648de5290348935c041fb973c56e9f6df2a9","ssdeep":"768:GoYedpEKH8w3FsP2ccnfcaeVbgOraiUDPiUIVmXaaoYo2eee6yHkgodiNZYge:mebxcM+2EbbgOraTDPiUKmPeeedkgAAc","tlshash":"73232c5a26f11530e203f0355a6fd9086a29905f6d8afd093d2c6194af1c93cdbfafe4","size":48519,"data":"","first_seen":"2026-03-15T14:17:01.635415Z","last_seen":"2026-03-15T14:18:05.424668Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/homepage.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7d396ab1f0d42300d6a3ed1905aad59","sha1":"969060284e72d16270281d23948e9962c3692362","sha256":"8ca0f6325fdeba2a006de7827d69862d1b710c5c80f34bce389ad5bfc20f7833","sha512":"528778d14823e5455d9603396494bf137e92685eb3e43e808634f7c69be5e2ed8315988fccc5503a0244ef18df73efef77a3416163101383b8cd97036d22cf33","ssdeep":"96:+eslRZ/0GRbj4n2GEg/jg/Igh5p2r1X3QXO008w+/nvgIAI2DO0mJEUUjr:+esGrD/jwPuQXDXw+/nvgIAIemJg","tlshash":"a29121857191f86d29ed8365b2a407e33232b0ac7544852cb43cede69c0ac45b2ff6f1","size":4567,"data":"","first_seen":"2026-01-26T15:47:31.268295Z","last_seen":"2026-04-15T14:56:22.390752Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/index-6eec3b22.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"f10f177c327accbc6143adfe1201ef58","sha1":"a9e3184290f1af5ce99a9b35a460d0ed6fbb5151","sha256":"3fd015ec6ca9a7b16f4499867077bedabb1f34d123e8a38a24d4084fc825bd87","sha512":"99fe1b571e51cc8e0b86f921fb2540afdf9729807dcbf23f1e3ff0328ff983b11af54c1dc17b04189a23a6da56d4fb9676ab2ade88a521ef2521fdb7a54e4a0d","ssdeep":"","tlshash":"5d21f47c7258725d810300d2f6aec549433aa9faf7734990ee8d07859e767108533dce","size":1279,"data":"","first_seen":"2026-03-15T14:17:01.51096Z","last_seen":"2026-03-28T19:42:48.619907Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5972c7dd39a5b2c49cdd196a2f3e20d6","sha1":"8908228900f0b0e7f3a895fb5cdda87215f5444e","sha256":"a7b8706c3d6895883f2cce4bface13731e36c64a90e6542829996f8ea12fa070","sha512":"f9b51260194de03ab986f88878c112c18e798c5765a1b3a57c2ff6463e856292bdfb9b333bd4f0f6230460ced001ad4db161bff746e138b6ae4ef5075f2582e1","ssdeep":"","tlshash":"c4a0128439d37474004043a07102f41072a0070c01028801d4d5851a3413653c01a28c","size":86,"data":"","first_seen":"2024-12-02T21:43:54.641563Z","last_seen":"2026-03-15T14:18:05.520386Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/zi6at9bnqxh8.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f5f89782a29033c88d13599e6a53377","sha1":"de0e7ebc7512a9af0d5373336e20a94a97fe5748","sha256":"3031cc1e45d4b76b5bfad7b5096c11e5861079ef5f9c9c04d47f595d80ccdd06","sha512":"4ff030a0495ff6225a9bb52e34e11e2fba9c8f9b5f2a400c79f2736ceef5c59de5bcdd548f3bf9a3981378bce0c0bbcde029cd0da8d0eb0a9d65fe0c7249afaf","ssdeep":"3072:4871gwaf6dEURovlaEWX2ftWnkteEXPClvy2EiAOvYW:48epIQaEWGftWnkteEXqlvy2uy","tlshash":"a894d5712bd0a89813978f7bb31b74d1fc2e096f3c550cabd241fd50a6a162beab1531","size":418802,"data":"","first_seen":"2026-03-15T14:17:01.342766Z","last_seen":"2026-03-15T14:18:05.416405Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/common.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e36862a81d11be010f625f8736f14cb8","sha1":"7ff75134005eac41bdadd7ea44b5566c2ff5c80f","sha256":"b58b9fb4d26cd4ad01b21b0f2a9d91237cad2895de09500ca820ced8d235464f","sha512":"2cbb7e90d98520c9a4cf55208a189b181f6c20870eb2b773c615109312021b181199dcab6c949fa3a90e8f491d49c11753539ebee858019b81353e2f8662b7a9","ssdeep":"768:qmqS/ZUxLqxvCBmmu/d1dJv87NIjkCCwpquGQa+IgXPWpkZYmBQbsJwZZVZG6Y4:qmqSx7n1FrG2cN","tlshash":"4803c8c933a0b1760bab8177d0af920e723354a9644f8410f42af5d87c35da952bfd7a","size":39329,"data":"","first_seen":"2026-01-26T15:47:31.257749Z","last_seen":"2026-04-15T14:56:22.370235Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/hystmodal.min.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"54c5e4f6e754f8dd7c84d825c8df4f49","sha1":"01b60f082f0fd9cb47762d6618a0af4f71612db1","sha256":"11e1ce38ce17ec4d38caff15f795ea9b0b364225841805ab489fb771934e5ad0","sha512":"04c6a17b35354c7c3a4bc9ea48e7e70d7a53ec754075ecb5360ee916a42098770f68bcb47bc51546f3439baf2e3978afcbacb8aed147e929b59ac30c44cc4e82","ssdeep":"96:KnpzQGGVN8LjQrJwXQ09QZJQ1iAJonhfrS:ipzZINEjb3SaiAKY","tlshash":"abe1821db23878b101efa464a12f5706f33518b46446845c7939ccd96ebac8b7066fb8","size":7211,"data":"","first_seen":"2023-03-07T12:07:13Z","last_seen":"2026-06-15T03:06:03.010148Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/no-module.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d75f4fed1f02eaa8ba337396aba2d62b","sha1":"69a1881d79c60eef69e855b04c931eb89f5b4407","sha256":"34ae69c94649c0c3fa3bbf7f73bc62a57f09d45256f876765647141ca59e5503","sha512":"4e99d5b7cd7c4ed7d464b50e1e36e00a8a438411811ea7db531fefd706c11fac4d93e34d76c6690860ccd7c03d726a170c6d62aece14fa4c13ec4dcf55efee4a","ssdeep":"","tlshash":"59016b390ae6582401e392a6f1bf953595b372731184cee2bccd87689f826208772c74","size":818,"data":"","first_seen":"2024-12-02T21:43:54.635902Z","last_seen":"2026-06-15T03:06:03.058637Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,Cg==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T09:55:29.106207Z","times_seen":215695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"case-battle.net.ru/zi6at9bnqxh8.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /zi6at9bnqxh8.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 17:20:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ec-663f2\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":418802,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7f5f89782a29033c88d13599e6a53377","sha1":"de0e7ebc7512a9af0d5373336e20a94a97fe5748","sha256":"3031cc1e45d4b76b5bfad7b5096c11e5861079ef5f9c9c04d47f595d80ccdd06","sha512":"4ff030a0495ff6225a9bb52e34e11e2fba9c8f9b5f2a400c79f2736ceef5c59de5bcdd548f3bf9a3981378bce0c0bbcde029cd0da8d0eb0a9d65fe0c7249afaf","ssdeep":"3072:4871gwaf6dEURovlaEWX2ftWnkteEXPClvy2EiAOvYW:48epIQaEWGftWnkteEXqlvy2uy","tlshash":"a894d5712bd0a89813978f7bb31b74d1fc2e096f3c550cabd241fd50a6a162beab1531","first_seen":"2026-03-15T14:17:01.342766Z","last_seen":"2026-03-15T14:18:05.416405Z","times_seen":2,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-6960fbc8e1c58.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-6960fbc8e1c58.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 13173\r\nlast-modified: Thu, 26 Feb 2026 17:21:08 GMT\r\netag: \"69a08104-3375\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"9ef17ebd5e6d2b72169ca30f4b7ed579","sha1":"2ddf9a5f729f54bcc0a37afc9e8f5f1747ced0be","sha256":"d39d7a36d2a287f0f1d937a4a1b2df7275a4026bc4ac587b63a0f0f6b9099897","sha512":"459d6b3ffc468cc98c5cd20b5a6922638ee20bc0cc8f063c959da9557da62c1bfb4409247a3db61a0568ad9153a062db5db4367a1c5767178431930ca081e5fb","ssdeep":"384:FsqfDYRMul0CLbTNo59OUF8naY7/hEGsomkbGhkOZoD:qqf8MuNLC59OhaY7SohmkOY","tlshash":"2f429cf9d36a7640a88d4c81f0117bcafe375a1dafb6858dc711790e38cdd1ae980294","first_seen":"2026-03-04T22:41:03.628638Z","last_seen":"2026-05-29T14:16:16.709111Z","times_seen":8,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":380,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/9909/thumb-5dde323527a8d.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/9909/thumb-5dde323527a8d.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1311\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1311,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"304bb8fb596782672fc3189950e050df","sha1":"bad0738a5941571636d9e0f29348752858fd3921","sha256":"34e7220d2dca947b0466281842addf5653236c0eb0377b6efd0733182a871f20","sha512":"aa34b08ea0e464f6aa2787b85f3e5f5c65bed73d95e55cacd58214c810ee147a10eb5ac7bea5c1e099e52f0dfb878854aa53692d7d668c66ded4b00a02a97aa4","ssdeep":"","tlshash":"7a21b418fbd5bc01e88c4371440443a373a0736a93af63980e01b838de29bb3c609a59","first_seen":"2026-03-15T14:17:01.346736Z","last_seen":"2026-03-15T14:18:05.400624Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/467/thumb-5c793b9d7e778.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/467/thumb-5c793b9d7e778.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1391\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1391,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"be90705cc34a2119819a74b1bd813f29","sha1":"75226fdd783fdfb0c739bfa72f86dfeb21d5c727","sha256":"9a64c9494ce0cac583adf01c0b83433738640160bdd36d65bb18f3b50da179c1","sha512":"591df352491e9470a222409524e127db41aceca2014cd2397b4181ba795e89405c5ebbef0fc5c0796eaa19516b1008fa4171297bdad9669a1554d656318b52ea","ssdeep":"","tlshash":"d821835562d17c63c67847b580adcb37b792725949464bb2e8c435248e2c7b2bb31c23","first_seen":"2026-03-15T14:17:01.34921Z","last_seen":"2026-03-15T14:18:05.471084Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/hystmodal-f2d302d3.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/hystmodal-f2d302d3.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/index_files/funds-form.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 17:20:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ef-14f2\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5362,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5361)","md5":"53e3f9647f65f2ad99a6bb948ef3b38f","sha1":"d3d3b8b0add4a95b2d6acdb5d3a2896b899ea521","sha256":"281cbeb38feb3fe589ac96bdd7454a988a18f5d88314cdf5da10a920c0839e7e","sha512":"b5f8af315c10151d06fe6bcb580f99c54a660d077f91fabbdaa1246793376ddafd679437194e81b8ad8010ea45842dd8b6cef4f7d9ea841f662e888118d27ac5","ssdeep":"96:ezrjuSlXQBaMHFsHxaINeih7QkEzF6mnd7ui8:KrjJUaesRnNeih7QkqF6md7ui8","tlshash":"4bb1522ab23854ba04fe895ba2b65b53f32468947407001d7839dece1a4fd877075bf8","first_seen":"2026-03-15T14:17:01.351702Z","last_seen":"2026-03-28T19:42:48.537584Z","times_seen":3,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/img/promo_trapezoid.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /img/promo_trapezoid.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 2252\r\nlast-modified: Thu, 26 Feb 2026 17:20:45 GMT\r\netag: \"69a080ed-8cc\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2252,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 223 x 48, 8-bit/color RGBA, non-interlaced","md5":"71f93e1d09a86b5ad4fa2c95b4cfe2d3","sha1":"8d071fe98e6fa465082eda4056352a865a765608","sha256":"475c40a74cc2ed223cc3f07865eab58d0d8763259bc0c9fd645621b37fad342a","sha512":"060a358737279ea10f0ea0280902e485680481b4324f08d3a5dea4237855c71742644dfb1f274e7c1b03845693dda9d601f638d58a170d103be65252b6f6a4ad","ssdeep":"","tlshash":"03414c3a0d17c97cd2c11c1aad16589445ec42c5120afe765fe18e80a8f99eac19eb14","first_seen":"2024-12-02T21:43:54.44282Z","last_seen":"2026-05-29T14:16:16.826021Z","times_seen":39,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-697c636089dc0.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-697c636089dc0.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 22204\r\nlast-modified: Thu, 26 Feb 2026 17:21:09 GMT\r\netag: \"69a08105-56bc\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22204,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"5d60c9b6277fadc0ca8ce19e4d5eb6e1","sha1":"d4f5aaeff7a1c12dadf9eacb8ccd9c908f5d279f","sha256":"e0c35ee3f979015345ace2865749654f6b32a0f8c11f8d41114b9cd1d49b2fc8","sha512":"30b7c16b419f9c7c5497ff4a71d4a41984319f077c4a8c598dcf05b09bdc5d6fa3ea8265249ed297b412f427ffab2e01cb2726f8d78d9297ea3fc4f7fbdf3f1e","ssdeep":"384:FgTMAHJ7tPDdX8HkXEMbHbrjXt8mBugeZSdlM0IZD476GB8F9oVVH:6TPrOkTbHbn9DX9IZ6/B8/g","tlshash":"16a2e1b39050d86fe4412827239530f871167ace0856096ef9a0d22de92279fff197e2","first_seen":"2026-03-04T22:41:03.663728Z","last_seen":"2026-04-19T19:19:23.497306Z","times_seen":5,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-694520fc13a50.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-694520fc13a50.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 77166\r\nlast-modified: Thu, 26 Feb 2026 17:21:07 GMT\r\netag: \"69a08103-12d6e\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77166,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"d2a93097124a28caf58085f02d1cc346","sha1":"9ba1243b22a8f03174df101ecb639b9f8ce080b8","sha256":"197a2893f2487b3e2b64dcea73bf470daf6ee4ce6b39fb6a50b982bbf463ac60","sha512":"03a079257f9040864334c1c28c4a48111c047368f3b169b91f601e1ba4defa5bd628659c10fa4ad13b2bfdcc28a3cfc5f6ee0f3a0c5ab73f694fffd3c8e23405","ssdeep":"1536:A//Y6M8ySbTwfqoAGCHyvGwIAC69zUOxLl+QnegOV8wev+BPzhffF:A46d3TfoAXMG1ALBv+QDOQknF","tlshash":"027302684fa804c8ec96376803792461de36c7db69ca41627c7da83e719b97373a3d4c","first_seen":"2026-03-04T22:41:03.650665Z","last_seen":"2026-04-15T14:56:22.366422Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":939,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-6929864c22fd3.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-6929864c22fd3.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 83002\r\nlast-modified: Thu, 26 Feb 2026 17:21:04 GMT\r\netag: \"69a08100-1443a\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83002,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"5e1f377aaeaad169c98ca2f6d0561844","sha1":"70221984b6ec55ec64d154b286ddad20d19f07a5","sha256":"fbdf516c67ce5e1605905d17753d928448c1b4fa0bd1d1fb7a69d3f9aca89ef1","sha512":"bdb20c6f70f204a0b81e4d5af54fb680628851b12ac1b7dc2cba018faf0e4f338810d4f824de0f9b3083e90e132758cbb34ba4f74a0cf00bd119937d7cb001d6","ssdeep":"1536:J/3oU8UEiGq7q1vVTsZNGOULufZYlxfeQCUUPMrAlXTW09:xYPUKq7q1v1saRL0sJ4PuiS09","tlshash":"7d8302f6cb8a59bfa74bd396701a03ccbef725515bab6bc0049360cdd4a0648cd3a394","first_seen":"2025-12-02T06:53:41.381578Z","last_seen":"2026-04-15T14:56:22.407038Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":946,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/enums-afffdb60.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/enums-afffdb60.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/index_files/live-drops.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 17:20:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ef-9cd\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2509,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2508)","md5":"c62c8c8e273458be30103e0e5d5c2cb9","sha1":"0b2794fd523e0e49ab13ee440ae28e404ee24e56","sha256":"38effee3988d6139bc9e9df5481aaadac5d0804824b726c5da21a8da1fee904f","sha512":"0ce21e01cf1621563fe8cdd95b7c3145c1208f9d4b4cf403f3c7c61e0cb56667eb49e4f677216dd7e4e9401518f576b9b0a737083e165a4ca54cd63c20e82b23","ssdeep":"","tlshash":"83515459746affff99432da330275242223509ca7a244374aed6631212d3e84e7b6727","first_seen":"2025-08-05T19:46:08.978753Z","last_seen":"2026-05-06T21:40:13.89616Z","times_seen":12,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/notify-09240109.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/notify-09240109.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/index_files/funds-form.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 17:21:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a08107-2fca\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12234,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (12114)","md5":"4a844dced0e59328b8f8a935f94ec0df","sha1":"105061409c7876fdffb02eb2037aaa01ed151655","sha256":"1fda4f20a035cbafb17db670173d8e54c1387fb732b1f43156c30750e40e7143","sha512":"20032756ae740e2634270399b5d77136421bebfa0703d51973cb5190b3384a969362f9e809f369abe817174c15736818691b7cbf4a7d3b5ad00f168570596b98","ssdeep":"192:1szfiWY/EGcdBIpPlgtVkCTqfBxthMyNjskb5ClSmgPhU80w0:yzKWobMEhMyZsk1CZgPe8p0","tlshash":"a342958463655b2b03d781abb8f95254f231d1f44069102cf9bceedb8995e81a2ff3b1","first_seen":"2024-12-02T21:43:54.628213Z","last_seen":"2026-03-28T19:42:48.601848Z","times_seen":6,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-697c698f9bd24.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-697c698f9bd24.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 17775\r\nlast-modified: Thu, 26 Feb 2026 17:21:09 GMT\r\netag: \"69a08105-456f\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"7024dd7618e13c83aeabafdddfd21837","sha1":"4b8a7270095e5089a7034aa629729ded37f76ccb","sha256":"f59ba40cf7a004418ed561d253d1707493ae81974e87010bb0b957414f46593a","sha512":"7f6c85a83f2ee0b4f8f95cf93539a087d1ebf23134184a46decd44c332defb3cbd42f8616afdc68721b5340b2dc75ea5074b73f11bdbb534b60f5d63c6bfaddd","ssdeep":"384:FJCykbLEWkEjzBs9D5HTSaU3Xcsg0uDJo2N:35wdG9DleaEIJj","tlshash":"fa82cfb0217fc7dd0c9d3ed6413c3ed36443873b6edb6aa6ea54ac9c08391085659c91","first_seen":"2026-03-04T22:41:03.649642Z","last_seen":"2026-05-29T14:16:16.829635Z","times_seen":9,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-695fca07c3fce.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-695fca07c3fce.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 80490\r\nlast-modified: Thu, 26 Feb 2026 17:21:07 GMT\r\netag: \"69a08103-13a6a\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80490,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"4507e9d22ea7d079f86e21116c594ed9","sha1":"232c19f148e07bd4387945e03b738570cfbc2b6c","sha256":"39373547bdab5d1e8c55e286e0610278e4f51ec1612c3c5f59a4fb1dbabcc682","sha512":"bac2047d0b7471f9953a6391a33b917458c9ff9593a259d44b5c6818a1480189c616c4d913299e4e24956cd113d73a1e3afdb5d513f81ce8a340b8966391598e","ssdeep":"1536:CrDsQTLIBO4rwR1K+EbyzHzWpwR8esbUzJNPxqsx0TP9gm1y/WzhXO:CrDsqIBFwRabKqiO1ePxqsyTP6OIOhe","tlshash":"e3730232f895f5e8713baa496983614cfc5785ac49f7fc42e4b6ca014ca53feda50b02","first_seen":"2026-03-04T22:41:03.588634Z","last_seen":"2026-05-29T14:16:16.626936Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":910,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-692988887313a.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-692988887313a.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 80708\r\nlast-modified: Thu, 26 Feb 2026 17:21:05 GMT\r\netag: \"69a08101-13b44\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80708,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"8b24e808e4f9e6de72e253228aa71e68","sha1":"d31e0bbe4e4c922b6be46c9ae8c6b50839a61b7d","sha256":"d6b2a0bee00d86b6d4fa3aab5cc79dab54397e8e86ed279c5adcb3bbc8eef890","sha512":"953769c62865015f9cd24696336592c76bb157cb6a2fe6dfef1779fc4b1b345da9a42742de6676f89ffc7a275df066b3d28b1d0ed53a8e4a207d67d06ab32f52","ssdeep":"1536:lD7hSvFmOsBwLjU1QLd6GtplCjp7FEZAo5CESzHY/I0l7jUNzlhPu816Sd5URy7V:l76kOzjyQLkGtvGLto5CESSl0NBxH6ul","tlshash":"e47312f426aee9df4938164bc307ba17c98f292361c75af281976ab5cf440433e86572","first_seen":"2025-12-02T06:53:41.336243Z","last_seen":"2026-04-15T14:56:22.404839Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":949,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/269/thumb-5c793b3066f43.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/269/thumb-5c793b3066f43.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1244\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1244,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b728029622531d72c9f2ce5cc0506b4d","sha1":"1f4aceace188951303634719e3585e1d344f161d","sha256":"dc71ab6aeadc5816fb65ae38e537f120e872ab95a38f05ea85ebb96a1963f49c","sha512":"ce5fcd806a4edc40c87f794ab9bd6d28f0f1ad0d31e8f61c91f0966dacb0938db000f9066a15ff2d4f829e869177991cf2f151db198d2458a29bda25c9bcafea","ssdeep":"","tlshash":"1c21a7123b927d51c0581678c18c5b627bad63acb1276e953c007008c9fabbbc475d86","first_seen":"2026-03-15T14:17:01.370341Z","last_seen":"2026-03-15T14:18:05.507619Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/live-chat.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/live-chat.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 6233\r\nlast-modified: Thu, 26 Feb 2026 17:20:47 GMT\r\netag: \"69a080ef-1859\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6233,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"b4c33f8bad39f410ef4a0829b4c2dd98","sha1":"6306a1b49d92dcc093ee545aac6cd3618604ebf4","sha256":"da85a21e7bbc12dc5cab8bc9aff739c4699070db39ac5496803d8cecb6531da9","sha512":"1ac737debef064f420493de721d84be676e952fe2946cafb24a190cccaf3e04d35093afc4af7702554537d9849b12fdd132fdad55f73f552e3f4d6f7a2e19a4a","ssdeep":"192:8ec66RjpqVbc9YbTcO0C706rpTzym29sp:8e/6Fp39YbTcO0G06VTzyzOp","tlshash":"67d19fb495e5d5399e3badf3620fb2cd5c23364cec3a7591794018a28604c1b0e92ebb","first_seen":"2024-12-02T21:43:54.576769Z","last_seen":"2026-05-06T21:40:13.901958Z","times_seen":18,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-6960fb2f19001.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-6960fb2f19001.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 17764\r\nlast-modified: Thu, 26 Feb 2026 17:21:08 GMT\r\netag: \"69a08104-4564\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"ee863a6c3268b95ea9a20b76204c28d6","sha1":"3299194559d6eaec209a1b17aa021e3ff4bbfb21","sha256":"86f21844aaf618f9501f3eec7bd5d8b1a379fed85287c70aeab3a25ecaae7274","sha512":"04c89558b3f565dbe3d5968bb36800bcac12349bcfec677a042b1dbfdc3ca5680ccb9bc0359fe0f2f80b7a9c1107bd91c7d39d127f8f2883da50143387cfee20","ssdeep":"384:FCiR8qXUaU3mN4ylqJbTAJ5NadcS9f6Ez+EJ3OoNxbR+PRsf:iqXTUK4IqVss6SkO5dvl+pe","tlshash":"a382cfe0352475aa4c5d107cfda63fe8149008b20dca7664b3e6e3a46d73789f07da76","first_seen":"2026-03-04T22:41:03.598297Z","last_seen":"2026-05-29T14:16:16.670377Z","times_seen":8,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":352,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-69298704b4786.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-69298704b4786.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 86628\r\nlast-modified: Thu, 26 Feb 2026 17:21:05 GMT\r\netag: \"69a08101-15264\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86628,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"c2d99893298f0a5a20ca03de34a4a11b","sha1":"f1fa4ad49728992ee92ae0a8552f8375122febd0","sha256":"d2032fbb1ea417c040171097ff9736f4764f398adf808c5020cf6fb78b8acfb9","sha512":"eeac02ab65542fe8f56cefc19caf057c96e5d4e9fd5f11f62aa193ee29b18366bd98813afbe786149bc81a5394622bf8ff9b934d6f7e9ac9c4303ef8efba5946","ssdeep":"1536:lc80R4QGH3OND3Ui/LKnL5RpnxIC5M3xhYFwwguzmjUyA815D5:90R3w3c31OnL5LjMHX1uz4HV","tlshash":"098312d7f52dee64915563231e7511ac28aecb844b275b19c021c772bcef997ef212c0","first_seen":"2025-12-02T06:53:41.524235Z","last_seen":"2026-04-15T14:56:22.394035Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":947,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/upgrade-icon.svg","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:25.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/upgrade-icon.svg HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 430\r\nlast-modified: Thu, 26 Feb 2026 17:21:13 GMT\r\netag: \"69a08109-1ae\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":430,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c83697cd6f5c5df0e167de9aa6e5c201","sha1":"cba1e47d9aeec688ef69890d438f8510e9c1a8c5","sha256":"2621f9b9b413d62762d3c1fa000c408afeced9957a34071c63dfa56c47c731d7","sha512":"5320face84c4568f8ee603c533ddd84960a18ca971e81b987659458b74921147624baa4cb138eb0049207c096c44f5d69c6b2bf13b490b6988d524c4a7aefea3","ssdeep":"","tlshash":"43e0e5fc93f8d158a1124b13ca783d80aa39b1ff034a11ea704dd9a08b546a7fc97594","first_seen":"2025-06-16T19:50:55.599752Z","last_seen":"2026-06-15T03:06:03.002764Z","times_seen":59,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/18846/thumb-67271f877847f.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:25.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/18846/thumb-67271f877847f.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 2024\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2024,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"88ba57d5ed91ae5404e1a6a5d86370db","sha1":"7bf47ee57c5e50348922517b103db40c11f9c584","sha256":"368557bcdc76f7a133c2bd3b08082446437594474608d05c4e589b1f34dbd3f8","sha512":"356fcbf8ced595b8c644a1717e3935cd0667982a7fa4e24e4f3a7d5e3b9894761947da64874863f45bff0c52e7cbff15c011a73f417cafeb569a2f42ebda1a55","ssdeep":"","tlshash":"d1412a38e92138fcde5c47b5088dcb4022423f3d62d3210efe86791c9a5bb75ca26c5a","first_seen":"2026-03-15T14:17:01.383694Z","last_seen":"2026-03-15T14:17:01.383694Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":55,"dns":10,"connect":19,"send":0,"wait":33,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/15883/thumb-61f4fd6380001.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/15883/thumb-61f4fd6380001.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1575\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1575,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7d13f5b45c2f96a1df136150aaac6bce","sha1":"295dd6fc3a6137d4fc0106589b434d7d15a73abd","sha256":"06f3d15347ca6a7e327f0a2d0ce2d1a0bc92a27f60d2cbe3cfa14367b355e187","sha512":"8fbd6318993c742601296ffc4e372d650b94afa2de46a4e1797504d11879b81abd7a3e2cabe3f1f394f3df01cea8c492e95d76783a69bbf07804647f88013bb2","ssdeep":"","tlshash":"7831b739a7e08c01c41d13b541d413922630dbd872d767d69891aa78cd3d532cd6ac26","first_seen":"2026-03-15T14:17:01.39226Z","last_seen":"2026-03-15T14:17:01.39226Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-692988219b971.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-692988219b971.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 78975\r\nlast-modified: Thu, 26 Feb 2026 17:21:05 GMT\r\netag: \"69a08101-1347f\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78975,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"2e1c26b8bdaf991758993ae3884ad3fe","sha1":"eb0b605c0f5036c3d13189a8dc163b9aec355c9e","sha256":"4ebd155d42815c5437243b8dc0dd06c168874188d74333b1e7157a4a0b941b7c","sha512":"dfadd453aa54f7d118bb4c9a7bf854733d9058fa0f62b99c9686d0fbf401a3cf1b9fc5c1669d8c26ec66783d990c026ad1756e252ab359c6b8b0271a8b5c0255","ssdeep":"1536:ijZuDzaeTwRZPYqMq0kQRbnyID2pHNru0b24HMPthuHhPnwxevYxH0A:ijZuCwwRZPN0kQl52pJD244thuBZw2A","tlshash":"9f7302269f4fdc5ae5d09572b294ac5fcee2067437289bd1b7c2d49cc608235c41fb92","first_seen":"2025-12-02T06:53:41.514289Z","last_seen":"2026-04-15T14:56:22.412305Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":949,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/images/misc/apple-touch-icon.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:28.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /images/misc/apple-touch-icon.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nCookie: uv=mmru8drb-wi6bi4c2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 14138\r\nlast-modified: Thu, 26 Feb 2026 17:20:44 GMT\r\netag: \"69a080ec-373a\"\r\nexpires: Wed, 29 Apr 2026 14:16:28 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14138,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"5d24873d99923d628f39310f3d17fdfa","sha1":"b538e53903de4760155d10ed77ed2d9a5a2879f6","sha256":"eee00e63a36d2635ee1e78c5a0502afc6b7a0708236ca8f7b125619ebd665a53","sha512":"d42661c3cb85fa55812bac79da3b15542993b88a1d728bd35040e1e8f4d6c57c5f13f21221acc70264b75c525641337c7a605303851d1f57be62535d4b356ba5","ssdeep":"384:14y9yv/o4eUc3bGPqrsmPanbdUY6rO/d3eLNEIst:14oyv/r8ogO5nr/hKza","tlshash":"6552d09b123582736bfe5f623064decd1b66b97505c13348a7ea799216fa5060d8c833","first_seen":"2026-03-05T18:22:53.775087Z","last_seen":"2026-05-06T21:40:13.952588Z","times_seen":11,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/medal.svg","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:25.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/medal.svg HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 17:20:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080f0-451\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1105,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"92f7712e9da9769723773822ee28948c","sha1":"6d3fe892934ea70262fb068d850ff9ddf2bd0184","sha256":"e5b670fa9d5f18b6a782a1d7ff5fdde9b308db1b42d3c348f8e5ac6d4886cfee","sha512":"e9880f307c8983265fc4eda6afaf3f5a4bfa59227185b50704eaa77fddceb4f1e12dcddcb26912f8629b95c47dd5bd6f17cc500d1d37fb95b3b91642909d69d8","ssdeep":"","tlshash":"3611c95583ea88b62e8817650b7d96847bb27493f170e18478ff0951ef0cac04adb6e6","first_seen":"2025-06-16T19:50:55.784666Z","last_seen":"2026-06-15T03:06:03.163735Z","times_seen":47,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/overlay-hovered.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/overlay-hovered.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 8529\r\nlast-modified: Thu, 26 Feb 2026 17:21:11 GMT\r\netag: \"69a08107-2151\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8529,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 251 x 292, 8-bit/color RGBA, non-interlaced","md5":"c9e7c2d9e93d443d7ad8ed641ab43b47","sha1":"ac5e22a9f5d6d7a04ac64f5a6777f5d7976ef3a5","sha256":"f347bcb38b8f466e12410c519c44b1171cfb7927f9d4b6b8971fa9f7ef5a2a00","sha512":"0725ec801cad7fa5f4d1aa7527cf3ced56bf4edfd9b1fbc381cb9554124bb20ea78cc8edd7b8c2ac51ed9649f23a3427d678f8039e3581933045a6a1528c0adc","ssdeep":"192:CS8yT+N8t4XjD3TZjgM0Sy+bPLpoe+y++QY2VEg:d8W+jXjzTZjcSyqLVc+Zg","tlshash":"ce023b53e909d763af27d21275744752ea036af83127534e7b0db1a19ceed807ea90d0","first_seen":"2026-03-15T14:17:01.399256Z","last_seen":"2026-03-15T14:18:05.49406Z","times_seen":2,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/case_updated.svg","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/case_updated.svg HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 17:20:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ee-dce\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3534,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2c8d52a7da1b57688dbe8ef09de9ea48","sha1":"73b89962bc64c2291504bf286646c390752d0be8","sha256":"5cf60cf79e672aa841d3ee156659d487a6258e07b577bca71ffd12a674e3a6c8","sha512":"fe91206f1b6066ec391c954148e02d69908bf00f8e946df04ebce17cd08bc80bdc4a236dc6bd8f67c95080aea81335aa5a496dc7d557e8baeda6e2aff7d44bdd","ssdeep":"","tlshash":"487175b2e3b858bdd84843d8867414693a10559ff2a283f8fe8d599c2f059e3c05c560","first_seen":"2025-06-27T04:58:45.863773Z","last_seen":"2026-05-29T14:16:16.584474Z","times_seen":46,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/1208/thumb-5c793cec7f94b.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/1208/thumb-5c793cec7f94b.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1586\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1586,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"103ae89b953f99706ca352277f282414","sha1":"89570cd86d1c119bccb73255a1a95f4aa77de8ec","sha256":"5e49a4e85e99c7bdd562dd0b573fcf6eab35472048f0e67eeb03d19af5a5fd04","sha512":"f2f552c11276d6e519d9d2f40485ac77e4f3a2492f20b8e16237fcf568c3b030b97fc84eb346546a816dc7a7511b8c8354361cb84cbba511ee8484a2c040ac3e","ssdeep":"","tlshash":"6331c7a377f22e03f65d237445704b2923a06a2d3d1739f6060e324a6564222cc12c39","first_seen":"2026-03-15T14:17:01.403144Z","last_seen":"2026-03-15T14:18:05.444714Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/9810/thumb-5dbec1ba8c3f4.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:29.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/9810/thumb-5dbec1ba8c3f4.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:29 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1662\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1662,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"6de7cbd45fb57ca83a801ccf3cfec278","sha1":"66bc09c2374e74dff2c2ac883718f4bb1a617136","sha256":"f13e12ea8bc8d5d02e8610c93be0b0ae1cc47a88427733485a88e1b38a41efa2","sha512":"c2bdf725cb72c0e067f04f12fae3fce81354d724078031711dc6bc318260700560a39b312b01e6e596a6dd929210e44dc647018190c9ca243b8d2f34512d7f04","ssdeep":"","tlshash":"2631e70a7ac41941e00c57b810890353a3546b32e3db35257ed1b345f93c2f0cc2fc29","first_seen":"2026-03-15T14:17:01.405686Z","last_seen":"2026-03-15T14:17:01.405686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/16569/thumb-62cb240a1399a.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:31.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/16569/thumb-62cb240a1399a.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:32 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1444\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1444,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2fb19523de0f9a53307d3d263c6051e9","sha1":"a8504cd5b367329cf4aede3000a64abb99fed16d","sha256":"2613d8ec9057d441d3e5a841dd37079436dad31059ceab8d1c73789388df8f74","sha512":"8a31822e09d38418a2e75b8d3d7f5b3af868fae91a15498f9cf226c2fc8a03000409db9f65a017a6ce015120afdbb098f1db52820867c0847806b67a80dcbe03","ssdeep":"","tlshash":"9531d8046ef01e92f05d137441ada2032ba16bb99b231559ff43f465d81a736e427cbc","first_seen":"2026-03-15T14:17:01.408057Z","last_seen":"2026-03-15T14:17:01.408057Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/15274/thumb-6155659a81fe3.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:25.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/15274/thumb-6155659a81fe3.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1905\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: EXPIRED\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1905,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"bd9ed99040739b4e2300473899542129","sha1":"3d60a7d4d1e4d52f88758aa9f28b26bcc4d4b305","sha256":"304cf1b49e85e402894e8284fefcf34886fd36ca5c6c4673d9e1d6d3f56e8c60","sha512":"5204f6a1906063ddd09fd8271ca22e58ee1f3c18b1efca0b461fcacf6e0f6897cde9463ffe242b2168480dd17f7958a48cdcd3478c1fba9a018c35fc64ae2502","ssdeep":"","tlshash":"5d41090875b10d56c80c2731dac9a75627b1e678c1ab2be2394db052f83cb37c526822","first_seen":"2026-03-15T14:17:01.410425Z","last_seen":"2026-03-15T14:17:01.410425Z","times_seen":1,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":39,"dns":9,"connect":22,"send":0,"wait":222,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/bcn.svg","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/bcn.svg HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 17:20:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ee-efa\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3834,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ccf796a303d08cb705635ac35982202d","sha1":"231ce5a1971e742bfd9b8fc4633fa697021c3d0f","sha256":"d96e3c77513c78deb1f64c6c9bd76df93619ebaa559bd17c131dae8dab1577e0","sha512":"fe68201fcbf60fe3e2da666ea6013e5662b0981fec7ea9323ad0737a949bdd1651b7dd90fd70e4061ee51e1a5eb794ab85041df748b9fbead09cf147110d0cc1","ssdeep":"","tlshash":"91816127d317d6abf5098184eee83016b2a0f9abd4e0d6d0a367792af1cc8d1150c3f8","first_seen":"2025-06-27T04:58:45.860802Z","last_seen":"2026-05-03T17:50:22.658232Z","times_seen":41,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/hystmodal.min.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/hystmodal.min.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 17:20:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ef-1c2b\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7211,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7211), with no line terminators","md5":"54c5e4f6e754f8dd7c84d825c8df4f49","sha1":"01b60f082f0fd9cb47762d6618a0af4f71612db1","sha256":"11e1ce38ce17ec4d38caff15f795ea9b0b364225841805ab489fb771934e5ad0","sha512":"04c6a17b35354c7c3a4bc9ea48e7e70d7a53ec754075ecb5360ee916a42098770f68bcb47bc51546f3439baf2e3978afcbacb8aed147e929b59ac30c44cc4e82","ssdeep":"96:KnpzQGGVN8LjQrJwXQ09QZJQ1iAJonhfrS:ipzZINEjb3SaiAKY","tlshash":"abe1821db23878b101efa464a12f5706f33518b46446845c7939ccd96ebac8b7066fb8","first_seen":"2023-03-07T12:07:13Z","last_seen":"2026-06-15T03:06:03.010148Z","times_seen":52,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/img/case-category-bg.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /img/case-category-bg.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 27671\r\nlast-modified: Thu, 26 Feb 2026 17:20:45 GMT\r\netag: \"69a080ed-6c17\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27671,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 302 x 80, 8-bit/color RGBA, non-interlaced","md5":"cdd47a785a73e2cd017588f6d3bd6c7b","sha1":"db071214097672bd9db7cf2364a282f75143cd42","sha256":"223d31dd76b295b451f8a068a66c3f21150336167a5446d91efa1e738398028f","sha512":"c7fe2dd35c612c5413c12020e2895f36009bfedd158d53290328b8321aceecbaff43bfd2d58b35bd0ca28c0a42c69e1a080f1a7ea58609b6e4ea03ae291f49a5","ssdeep":"768:HABTLovVR8T8loG35f+IhrvUM7zfVFotZ:HQvov4A+q5fVhrpfyZ","tlshash":"62c2f16431d8ac7e6faa84df294d94afcb8261cc6426c4edcd02af708751b5cb5f0e46","first_seen":"2024-12-02T21:43:54.445521Z","last_seen":"2026-05-03T17:50:22.620767Z","times_seen":38,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://case-battle.net.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26596\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 15:06:04 GMT\r\nexpires: Fri, 12 Mar 2027 15:06:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 256222\r\nlast-modified: Mon, 15 Sep 2025 16:30:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26596, version 1.0","md5":"dae1850484b86d299c31bc08aaa563cf","sha1":"dca808d6d16965c40bfba4e4b3c8a819f843890d","sha256":"8f80f993e523f2e6c2d097552740fd26331658da23ffad31d26edcdd3aeec370","sha512":"69b34f2652aa731ad29fe49a8cea85ebe4ef402573a10048598667f94b7a7855e534121f22d7749b81762b3176f437de607745df82b71484c4ab7c9f8bfd40e9","ssdeep":"384:nYOl9Z/81DjYTaXQMfCMNASNEVM9mYQdpx1sLt/zEkNKxgmS8AXACAU:pJ8NY2XQk0omjdKvKxgCAXACAU","tlshash":"9ac2e13f487a2046c71227f8ee5fc9b571c360a35ab32345c26748650db0ea93f86776","first_seen":"2025-05-29T21:46:50.299968Z","last_seen":"2026-06-17T10:15:04.642984Z","times_seen":39071,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-6929878c40849.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-6929878c40849.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 74462\r\nlast-modified: Thu, 26 Feb 2026 17:21:05 GMT\r\netag: \"69a08101-122de\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"f96dab7ed4d8a71ca7185b78c22cb4f5","sha1":"cb809b2d28f432e7fb79c64dc5ab26134c9a2eb9","sha256":"712f63a6b514fa5753d7af74a8584bad5d12e2e526aaaa1815160b3d39c57d5b","sha512":"afa7db3b32271e00252226057a29415e47e9465eec094d5acdfe9a08491ec042c3598b9224925b0c1a96d47783afa6dc4387258a0d9f7b11bfc90424b9f71b81","ssdeep":"1536:c9XGxcO7WTUxWgpTx4kohtBPgRwvjFt412CsvK8VlYIIAno:c9XEcXTUYgANhtZdwZKl6d","tlshash":"d17302154cb8152fdd90ca1c7cb6365e9e3e0b2cc55b2e9f1af168483a9831ad1c2f69","first_seen":"2025-12-02T06:53:41.504622Z","last_seen":"2026-04-15T14:56:22.394726Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":948,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/14486/thumb-673a185c4c26d.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/14486/thumb-673a185c4c26d.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1954\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: EXPIRED\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1954,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"447819d00e9d918a20cdac51ca9b97db","sha1":"0693001118ee9490508c933cbb4307bfacb43e2f","sha256":"9a65d5a26a3e7a7b2944269392de3f163e97d645a99aabe22e5064ac7c37fc99","sha512":"c51cd6dfc212c2a5978e2f723cd1b5a7e0f633e46c584a5dd9ab96eaeb350b729501843d9bfb255c46ce77bccf0881726b57b5c2182ad371dfb39435ad183c9d","ssdeep":"","tlshash":"ee41f7a1c7e64cb3e15d3338a38e80013b50812eb2224b8719089665cf38527cf6992a","first_seen":"2026-03-15T14:17:01.419919Z","last_seen":"2026-03-15T14:18:05.394438Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/mc.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/mc.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 2439\r\nlast-modified: Thu, 26 Feb 2026 17:20:48 GMT\r\netag: \"69a080f0-987\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2439,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 30, 8-bit/color RGBA, non-interlaced","md5":"708506421fd71ff4a28e158474f4ecea","sha1":"79467f671e2c6e8e9b2ccb10a079afc25ec584ee","sha256":"682aa094239baf3bd2e0d576d1b1da085a7c64f434a1d8f8a4d036abbfa3b7d5","sha512":"21bc557386b1b535cfb10a394061bd635ca223e182c95a3931773ff14b96ef8453e38e1d43641e6acbd0c26c11ad17f7f1a896c6606597d56362598831048b11","ssdeep":"","tlshash":"fd412d5161fe28126009a7a775942d6c1365335c1d0f8e5c9005f492ff0024c43fdca8","first_seen":"2024-12-02T21:43:54.420431Z","last_seen":"2026-06-15T03:06:03.126779Z","times_seen":48,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://case-battle.net.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:12:14 GMT\r\nexpires: Mon, 15 Mar 2027 05:12:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 32653\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-17T10:30:46.688547Z","times_seen":287293,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":172,"dns":0,"connect":20,"send":0,"wait":8,"receive":2,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-697c69816cf1a.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-697c69816cf1a.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 81693\r\nlast-modified: Thu, 26 Feb 2026 17:21:09 GMT\r\netag: \"69a08105-13f1d\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81693,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"cab7842a84e16a743acd748f8eb13ab6","sha1":"984b4032214bf9bf468c80718ebb51f5ad09e0cf","sha256":"007a76e9b3ed8d9abd5ce8abc4b9c91b12305d96158e3262dae842614b9b4e1f","sha512":"f3ee117157b5696e81224810e6995e4e884db10972515d40c2bfca527465e775ab47f40435ed9a7d94759bbeafbb71b174e0c1f22327e9bf2920c34c0d8701aa","ssdeep":"1536:XfFhQiCs2o9DYRvTaLxnCU0q27/dB1itbBCyp/HxNKh5Vm6e:XDl4CyTaLl27dB1iuQWVpe","tlshash":"d78312c898727709797b1085cf9ff07c2be10c98948d196afde5c924a746233bb4eac4","first_seen":"2026-03-04T22:41:03.642105Z","last_seen":"2026-05-29T14:16:16.595059Z","times_seen":9,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/2185/thumb-5c793decdaa27.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/2185/thumb-5c793decdaa27.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1700\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1700,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"5e7d89b7d876d3614ed7821027ff87d9","sha1":"a546fcb0bc13e81a7b4300167015d200252c61c8","sha256":"5ca0b1e78e9a9f88c3a0a97baf972f1ede866d40467d8e9867486f46721f76cc","sha512":"b609369b5a199e5614216c5d96327400e096e1f47ad3a9bb0cb7aafdb0ed46a8a68e4a9393653bad7aa78a21d321995f9c15166e99cb2861297deb92b70a22cd","ssdeep":"","tlshash":"2331c65342f02d3ae846933846f98d101751b89ba72e3f367d44b3249a7e2b6ec16d20","first_seen":"2026-03-15T14:17:01.425368Z","last_seen":"2026-03-15T14:18:05.487924Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/2425/thumb-5c793e2608a3c.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/2425/thumb-5c793e2608a3c.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1770\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1770,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"06161593eeacd025f7808ab122053203","sha1":"b95842d77d060d6ad58ac0f6e7b2b57c9761ac6f","sha256":"a601afb4a2c48a648ede30b808d85393d8c69a1f50a5e8f63704c338062d6a11","sha512":"ea75fda232456daad2e4720bccebde33f6d8bcd9862761b2bec454e73fdd7442d7396585301acfba0e57574f03e45886697554d2f9a1b880aef8bcd15af9a1b0","ssdeep":"","tlshash":"aa31fa847b928e0dc428077045943fe06283a674b6061cb89fb03bbd95b7b27fd32d25","first_seen":"2026-03-15T14:17:01.428083Z","last_seen":"2026-03-15T14:17:01.428083Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/img/svg/icons.svg?","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /img/svg/icons.svg? HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 17:20:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ee-d3e8\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54248,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b676ea8a82070d4587560c8bd3883594","sha1":"fd6fcd30136b723489c14723c6c37a682684dc3c","sha256":"6a58245471b1dd980261442d568530389ab81eb505eac4db3fbd7a720bb54fbc","sha512":"49e94fab9ef7ed08d6cdf5afce7501bd607c65c9dd824f7a30c8a49ffd2475eb477ed44e4936bcc976e5eb8a7ec282fc078cc79ee70be276827e4ac14e30e075","ssdeep":"1536:ekdRVIfV1NVpIgI1nRLYmpLBjceHDFgPDwjZ4Dh:lLE1","tlshash":"f3330b7253f443fc9ac547184ab818653afd10af75b1d0e87f6f8b449f4a9f29068ea0","first_seen":"2025-06-16T19:50:55.4628Z","last_seen":"2026-06-15T03:06:03.00344Z","times_seen":14,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/api-yUUW1LL4.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/api-yUUW1LL4.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/index_files/homepage.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 17:20:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ee-8d95\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36245,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36244)","md5":"df891bc962073d9d6dba5235a64519d5","sha1":"8c1f6121c0842cdcb0be5b154f403d7be2f1bbcd","sha256":"fdf37e1aef1649963f578b58e8cd6a711b34cba269c7c53e2732845a4104333c","sha512":"a5bd917c55f45ac982fc7661f90ed6659e34d73debf9dbdab82b78f719329f2a529f526905cf592881865e67638a57dc2e67087aa2cd60c49de74f321726505d","ssdeep":"768:f9XEahb3Y+eWuPPr5RjWKlVeZ6VwviKl/PhSgqaFyO7i/zFu3I4QOfwgQ7WR33Ct:XVl/Jb8fuQKHI+prHEctSR","tlshash":"e2f24bd57691b06113aa64f740ef0506f3399519b44e84e0f1286cdb2cb520e9bbbf7d","first_seen":"2026-01-26T15:47:31.320644Z","last_seen":"2026-03-15T14:27:38.918539Z","times_seen":5,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.me-talk.ru/API/DOCS/onlineChatAssets/json/8/2/8210a71e65c7008a8529b00a3c7397fe/case-battle.ru.json","fqdn":"static.me-talk.ru","domain":"me-talk.ru","tld":"ru"},"ip":{"addr":"185.71.66.141","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"me-talk.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 19:27:04 GMT","end":"Sun, 17 May 2026 19:27:03 GMT"},"fingerprint":{"sha1":"0A:32:C2:5A:3D:B2:55:CA:08:B7:A2:05:90:F6:15:05:30:75:22:5E","sha256":"C4:EF:63:F7:C7:52:82:C8:79:43:91:3F:F1:6F:5A:E1:12:85:0F:1C:AA:80:37:48:EC:FF:D3:1E:0C:A3:73:BA"}}},"request":{"raw":"GET /API/DOCS/onlineChatAssets/json/8/2/8210a71e65c7008a8529b00a3c7397fe/case-battle.ru.json HTTP/1.1\r\nHost: static.me-talk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://case-battle.net.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 15 Mar 2026 14:16:27 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 162\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Accept,X-Metalk-Time, X-Metalk-Org, X-Metalk-Site, X-Metalk-Talkid, X-Who-Knows,DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nP3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"70461da8b94c6ca5d2fda3260c5a8c3b","sha1":"994bc667720c21257500e29038c1a5f61e25da1e","sha256":"f33c27745f2bd87344be790465ef984a972fd539dc83bd4f61d4242c607ef1ee","sha512":"ee993842123fa9b1905fe6b111aca70c1ea3e7f4fefeff889cb803887c6ccdccbc9a8e1025cc98528b7790e973436ac650c733421a168d0cd0dba22141b43179","ssdeep":"","tlshash":"aac08c6d6513ac8dca53223827c3a180c1a6832baaaa451105809143b0cb2998ac239a","first_seen":"2023-03-07T16:03:30Z","last_seen":"2026-06-16T10:58:39.790096Z","times_seen":26489,"resource_available":true,"data":null}},"time_used":463,"timings":{"blocked":194,"dns":13,"connect":41,"send":0,"wait":74,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/images/misc/favicon-16x16.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:28.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /images/misc/favicon-16x16.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nCookie: uv=mmru8drb-wi6bi4c2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 710\r\nlast-modified: Thu, 26 Feb 2026 17:20:44 GMT\r\netag: \"69a080ec-2c6\"\r\nexpires: Wed, 29 Apr 2026 14:16:28 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":710,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"bd3d478bd535bc05ac1a3ae3ea63cb50","sha1":"1d41d5b5a14d3b3ad9c3f79be8e487b16dae3d03","sha256":"c6c4ba1f49ff05bc0dd22958a7226184a00550b08c987332f934916a48e3501a","sha512":"cac4027b87a38274dda822d9d28aabe8d390840baeda059ae385ed300924ede7d54a5ed502a63191dffd02499878c32577f3a810ccdaede9cc512b62c62a9471","ssdeep":"","tlshash":"4f0144c1e5699578c92833a69f9b70a189a24704eaa83c98bf575d7505a790005b0d12","first_seen":"2026-03-05T18:22:53.769651Z","last_seen":"2026-05-06T21:40:13.99843Z","times_seen":11,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/contract-icon.svg","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:25.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/contract-icon.svg HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 17:20:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ee-dd2\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3538,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d40d0b5c58b0b24e442e4946d03625a","sha1":"06c41982bf5e035e0e1e187555b3c842a8641837","sha256":"2fd79066153d6bebe78aab3a6581d3fbea594699dee06cf9d2301dadd2aa6518","sha512":"d79d470c52ac6c6de1212f3202d421e245cb68b981ab99d80e2958ded7cc11cedca83ff0260c2df82894bc14e10a244ad3a706ce1a7e36e1e2e8882327ba678d","ssdeep":"","tlshash":"4471df560344dffbaed8853c9690249670e4dd6fe1b0f1d8abab642bc50c8c0a49c7de","first_seen":"2025-06-16T19:50:55.594134Z","last_seen":"2026-06-15T03:06:03.232681Z","times_seen":59,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/933/thumb-5c793c9089da3.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/933/thumb-5c793c9089da3.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1270\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: EXPIRED\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1270,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"8129e29e46c2ffa544e266f0de0bb441","sha1":"2d6d8c585a99a6ff378648733b40a305288581cf","sha256":"d296edaf1cf4c50a61917827d7973918c1a942787eb2ada457966409c893daf5","sha512":"873f972117a6660a5f24e6a0c5bff310e4a74700acdae5381f54f85077d890dfe538b7e127249e1c0137a53ff37afafb723e67d2d2e0926a86c5d31612f22c59","ssdeep":"","tlshash":"232174a75693189aec0e1b3448cc83463328da0962521e96ed86bd511c395a3ec2dc3d","first_seen":"2026-03-15T14:17:01.438854Z","last_seen":"2026-03-15T14:17:01.438854Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/common.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/common.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 17:20:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ee-99a1\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39329,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19650)","md5":"e36862a81d11be010f625f8736f14cb8","sha1":"7ff75134005eac41bdadd7ea44b5566c2ff5c80f","sha256":"b58b9fb4d26cd4ad01b21b0f2a9d91237cad2895de09500ca820ced8d235464f","sha512":"2cbb7e90d98520c9a4cf55208a189b181f6c20870eb2b773c615109312021b181199dcab6c949fa3a90e8f491d49c11753539ebee858019b81353e2f8662b7a9","ssdeep":"768:qmqS/ZUxLqxvCBmmu/d1dJv87NIjkCCwpquGQa+IgXPWpkZYmBQbsJwZZVZG6Y4:qmqSx7n1FrG2cN","tlshash":"4803c8c933a0b1760bab8177d0af920e723354a9644f8410f42af5d87c35da952bfd7a","first_seen":"2026-01-26T15:47:31.257749Z","last_seen":"2026-04-15T14:56:22.370235Z","times_seen":9,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/saved_resource.html","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/saved_resource.html HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: text/html\r\ncontent-length: 149\r\nlast-modified: Thu, 26 Feb 2026 17:21:11 GMT\r\netag: \"95-64bbd58d02bd9\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3c2ccda97c47ede0b1c91b11efd575ea","sha1":"0a348c4b61c961aba7618f909beb87f740a81983","sha256":"97f9b10039b05e1af4a3c9b778fc72ba44cf68a376e4ec1d55f2558f16cf3e50","sha512":"31afbe911abfda33a2948d14578ba290b604920983118ca5a6268a9906120ef365416e5e776ea685d648eef7a2ee2245f424829fdd4c7150d944f4bf673aee28","ssdeep":"","tlshash":"50c08cb52412200ba220aaa2dadde56408408010a04a8c82a04039ac65cc35ce8a3690","first_seen":"2023-03-10T00:19:37Z","last_seen":"2026-06-13T00:23:18.102155Z","times_seen":1308,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/img/svg/icons.svg?2","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /img/svg/icons.svg?2 HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 17:20:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ee-d3e8\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54248,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b676ea8a82070d4587560c8bd3883594","sha1":"fd6fcd30136b723489c14723c6c37a682684dc3c","sha256":"6a58245471b1dd980261442d568530389ab81eb505eac4db3fbd7a720bb54fbc","sha512":"49e94fab9ef7ed08d6cdf5afce7501bd607c65c9dd824f7a30c8a49ffd2475eb477ed44e4936bcc976e5eb8a7ec282fc078cc79ee70be276827e4ac14e30e075","ssdeep":"1536:ekdRVIfV1NVpIgI1nRLYmpLBjceHDFgPDwjZ4Dh:lLE1","tlshash":"f3330b7253f443fc9ac547184ab818653afd10af75b1d0e87f6f8b449f4a9f29068ea0","first_seen":"2025-06-16T19:50:55.4628Z","last_seen":"2026-06-15T03:06:03.00344Z","times_seen":14,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/_commonjsHelpers-ecffabcd.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/_commonjsHelpers-ecffabcd.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/index_files/live-drops.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 371\r\nlast-modified: Thu, 26 Feb 2026 17:21:13 GMT\r\netag: \"69a08109-173\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":371,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (370)","md5":"b492617b955c6fbf9f992c8269dc9a27","sha1":"20e21179cdaba64d059eb5c31c1221ab541bc685","sha256":"48a8259b7a1c5172223b014481ad43ed19c503615166ed14c6f3972062cd3e52","sha512":"5925dfc85ba7bd993005501fe1c9d10851a3d0ac575aa422d19a37fd0258a7f0aa50aa0e09731960b69cc3c92d111ec2d1de13fcdff1fa9ba51263f3a78f6a0e","ssdeep":"","tlshash":"afe068d0ac4000f0763900acd37b500be25294bf13dc02b0c32c0e3aaedc2f8821e6a9","first_seen":"2026-01-26T15:47:31.235583Z","last_seen":"2026-06-15T03:06:03.055048Z","times_seen":12,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-697c6a0fe722f.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-697c6a0fe722f.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 26927\r\nlast-modified: Thu, 26 Feb 2026 17:21:10 GMT\r\netag: \"69a08106-692f\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26927,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"93cb68963fd7df756e5654452785eb55","sha1":"93fefab69d9a5a43abecccea06db41299233a712","sha256":"7407bb503f7d4221fdc1462e18749021b87fb81024c7717ebd451cb5193532d2","sha512":"4a1096ed2c61b9c90a78d1aa8e8663ad02fbc4456614d9558fef1d3138ab071c02b7bca8144cd12ca93ea9134aced76deb8541b638e4889d4edc8866cd89927b","ssdeep":"384:F3j412wJHoHIE33vjte04MuZzRtjN+kt0+Sf04wv2SMNex1JHtz6MgBJXf:NUgDHPZe04MuZXtJ80/2SVBHBYXf","tlshash":"7ec2e1b492bd6fe453210364d96edef01abc510d38a50bf8d89470698fcfa19ce6912f","first_seen":"2026-03-04T22:41:03.592804Z","last_seen":"2026-05-29T14:16:16.654533Z","times_seen":9,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/926/thumb-5c793c8d3baf0.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/926/thumb-5c793c8d3baf0.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1437\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1437,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"8602f4d4043f34fd73e82cb798c36180","sha1":"f69fbbfeec66eb96f55242f8285184f5a42c4abc","sha256":"ac9e4cc5e5f54c4087f58558ec370e0321bb1b3dd4b00122eefd78057cb04ddf","sha512":"b4552076d594de6424fe61a7424e158d106d2c907cecbce61cf4d2bdb44e54e9463da0a25c2751b70260594ec49051df3ace292bc93a165a001c9d81f6b33053","ssdeep":"","tlshash":"ec21d622c2f04c1ae9118b7045e917016390ed71e6327f787a8e26286e3e3b2ce40c14","first_seen":"2026-03-15T14:17:01.48251Z","last_seen":"2026-03-15T14:17:01.48251Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/15362/thumb-6156b6a39c3b9.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/15362/thumb-6156b6a39c3b9.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 2273\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: EXPIRED\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2273,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c2ec530d8f524a6ee898c552386b76aa","sha1":"1b1c2b7278e469f08f9f540ad98b7caa6ba164bc","sha256":"32b8ce26d72c96c31a4e6f7a0d60c2b71268e579f29e26977ec21072fd12d4d5","sha512":"afbcaa761b68cca7c0425d6622c621fd3d7c693e39287b946411f5b0f2256cabba31d66ab619d3d580902053fb5c985f4e9789a1413e63b2901142e6457b5842","ssdeep":"","tlshash":"fb410b4927634882d95b133d1ada813aab908710562f9ba47c4539909d3d6f7c6f3c3e","first_seen":"2026-03-15T14:17:01.491902Z","last_seen":"2026-03-15T14:18:05.489137Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-6960fa7b71be5.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-6960fa7b71be5.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 13677\r\nlast-modified: Thu, 26 Feb 2026 17:21:08 GMT\r\netag: \"69a08104-356d\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13677,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"2a5418d411ca927e524212f1cd3d3d35","sha1":"1d6a55f0dd0e0e315453df1cbe05875fcd7604b9","sha256":"6f5be9e73f35dcf003e22516f5f2ca8b7dda78b6794c899724d9b0bd087ddb6b","sha512":"0d9da8afcd225cf15ef2f9be8ad2492128308c6c90c48fd8da3c97c34c07e40ac0beaf92d053cb2eef435a2543f0456d5b814eba16d54897513d2f1b003537b7","ssdeep":"384:FIaMbedwnoeOw5PT7cF3md57b4Vgvlwa/W8Qyglt8:SaVdenPq4Ig9ahy9","tlshash":"2752bf90477d466f0928fe5deed10e47e8b62a47bd7d44fed10ae91e0a0458b3405a72","first_seen":"2026-03-04T22:41:03.583811Z","last_seen":"2026-05-29T14:16:16.508701Z","times_seen":8,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":324,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-695fcb8f50dba.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-695fcb8f50dba.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 86108\r\nlast-modified: Thu, 26 Feb 2026 17:21:07 GMT\r\netag: \"69a08103-1505c\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86108,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"80694e25d7d0d2318eb98df409f4433c","sha1":"8f817888587545bf2d323e78042b373bfd38f8fe","sha256":"43257703129a68756ced810c6e546b42a4947c32ebec97af5b1e4fe9e7251b30","sha512":"2ba085e2ff5b3b5d6fbac733961651fa9ee83afe644f56a93fcf1564c12c9ddbdad4fd6a43aa15cfe8b9f92f923303a7f2f2f0f00042516a9d794f483e0664ee","ssdeep":"1536:M6/3hA3oSyzV02+gItViXLGAazUVf0lAJfQl36deYbFysRKEodYuNHs8bqCh6B8O:p/3hijA2VGG7zUWlAVQlqlEKuJJqChJO","tlshash":"318302d3b29907b3678a06a13d3107f0b6289351395f58891ee8ed10b1b48d7f1777ba","first_seen":"2026-03-04T22:41:03.627711Z","last_seen":"2026-05-29T14:16:16.585326Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":911,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/index-6eec3b22.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/index-6eec3b22.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/index_files/live-drops.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 17:20:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ef-4ff\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1278)","md5":"f10f177c327accbc6143adfe1201ef58","sha1":"a9e3184290f1af5ce99a9b35a460d0ed6fbb5151","sha256":"3fd015ec6ca9a7b16f4499867077bedabb1f34d123e8a38a24d4084fc825bd87","sha512":"99fe1b571e51cc8e0b86f921fb2540afdf9729807dcbf23f1e3ff0328ff983b11af54c1dc17b04189a23a6da56d4fb9676ab2ade88a521ef2521fdb7a54e4a0d","ssdeep":"","tlshash":"5d21f47c7258725d810300d2f6aec549433aa9faf7734990ee8d07859e767108533dce","first_seen":"2026-03-15T14:17:01.51096Z","last_seen":"2026-03-28T19:42:48.619907Z","times_seen":3,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/img/first_promo_block_one.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /img/first_promo_block_one.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 3562\r\nlast-modified: Thu, 26 Feb 2026 17:20:45 GMT\r\netag: \"69a080ed-dea\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3562,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 172 x 81, 8-bit/color RGBA, non-interlaced","md5":"5dd8d4a7d734b908d0b36a4f201efe8d","sha1":"1b5f3b7f2148eff73e75f648bfd6384816dd62be","sha256":"35acb1bbe452e4dd06590f9c4685075442a6b9b966d31ceb35adb73dc565955b","sha512":"6646612b722d2abf21a2c38ccbd9fde1b4e17fd542a90daf041b4c775d579e12a4010e67dc9bc0a07cccbf4ad99ffcaba47e65625a458fe801844a2922a1356d","ssdeep":"","tlshash":"92715d7027736c0a5c863d68029031f492099bb69c08a9dfac6a5dcd19b2d40e97a4f1","first_seen":"2024-12-02T21:43:54.441339Z","last_seen":"2026-05-29T14:16:16.843396Z","times_seen":41,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-695fcd52ad0f7.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-695fcd52ad0f7.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 88583\r\nlast-modified: Thu, 26 Feb 2026 17:21:08 GMT\r\netag: \"69a08104-15a07\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"e1cad07e82e386e43b99d89450598faf","sha1":"23c33dbcfd66f86659f312c520d2aa2fdf2ef3a4","sha256":"e996a325977ff9a12e125000cd727a6cf233f8a2eaaeb8ad8262f87c2a8e1898","sha512":"f5dc87be9b23cfcc5157446c62f5f0ddcd3d1282fc22ebdf1387e0dda4f51f16f5c545d2807d4fd3afcedc8db8852134baea88e0e5becba91f8a4622465b711c","ssdeep":"1536:um3sai9ivQC9m7VO9LVG4ex5DALCOxrQMQwY0G/wjGB:Fs98v5b9LU4kUF9Q6Eic","tlshash":"3a8312f96f1e8158f7f74a261d415fbd0b11fb2b7ef2969908959183aedfe2620000c8","first_seen":"2026-03-04T22:41:03.629611Z","last_seen":"2026-05-29T14:16:16.577385Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":915,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/19602/thumb-67f8c049b93c7.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/19602/thumb-67f8c049b93c7.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1912\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1912,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9eba021cc040d223b534b714190a0f31","sha1":"1d15149a4518c4b9fbb6eb69bfe037e4907c90ac","sha256":"e182ca0c43270da1b906a82ba2f1b972bd22b1a544454f6234dc72f4b6bd83f9","sha512":"400d74261bb782b196ddb39d234900d0c1b23f21d620a0cee1e3be6f065100f4b053bda12bdeacac1f870811db7bcc74dac47bdddcfb44c019fb6735da9cfbae","ssdeep":"","tlshash":"dc41eb1a53616d40d50c137b819632413b80f0b0c65a1f99f8433d34dab857ede77d08","first_seen":"2026-03-15T14:17:01.523914Z","last_seen":"2026-03-15T14:18:05.445974Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/21079/thumb-68d6b62a99193.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/21079/thumb-68d6b62a99193.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 2258\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2258,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"8cff26e312b34487cee83a9541a0aa75","sha1":"4fbd504bc24a006932b439d78bdb6802b095b493","sha256":"7a6b73be4f917827c9b6ed320b3244edebf27f17f62b32f68ac764345d019643","sha512":"2f4577cbca30de7e8e72f41d9f5766b19b6116bf14a72a2bb6ea10dba2720acf58ad94af029a4643c2f2a57368df5eb80a62f92b4441cb913548c90784865518","ssdeep":"","tlshash":"00410c1fa5c6cd49f81c0cf844e95184f7b5924c60260b5b667eb7418434e335916d36","first_seen":"2026-03-15T14:17:01.528951Z","last_seen":"2026-03-15T14:18:05.3972Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-6945225676877.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-6945225676877.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 14295\r\nlast-modified: Thu, 26 Feb 2026 17:21:07 GMT\r\netag: \"69a08103-37d7\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14295,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"67f45ae222e034ab3914b9ef2769eed3","sha1":"c1dc247a364878e48e86451f9e1f8f32cd002e84","sha256":"a7556d5154a1693a4973fc96c0a8b852f339fe3b7ccf7ef0cc738574f64d39fc","sha512":"0e61954b0b1140e8ac7f024aa0ae8329b042ecaa6112c955317888af7d6827a0345517089da997a3d454fd6b4dcfb1776f721fbc5caafae692206a12e6598ba1","ssdeep":"384:F/NqlR4GAj0JDQ/fcG8bkf1aet6nDdtS6V5S7W7L/:3q5e0Jc/fcG8AHtstS6VY74L/","tlshash":"0d52af6ef8f9045ee3d357ab125996aa00af4188ff7417cd8b2039045c7ac153e6efa1","first_seen":"2026-03-04T22:41:03.617734Z","last_seen":"2026-04-15T14:56:22.388131Z","times_seen":11,"resource_available":false,"data":null}},"time_used":986,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":754,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-692986595fba2.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-692986595fba2.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 15894\r\nlast-modified: Thu, 26 Feb 2026 17:21:04 GMT\r\netag: \"69a08100-3e16\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15894,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"c0616e7b202e96b9730ebe2eedcfc3de","sha1":"0a3e9689a4d16103da0b3a7ed45abc0188f0f5fb","sha256":"b94427dbf89a69bfff86054c4b6aea0c7551ddbb32e873b73498bbbff55c31a8","sha512":"df9708a781fc05d07c24a9f3507d0d7b25b2165a04400bca176255bdfa67fbe9fa40dc6169ba920ee3bf8cd43745b66794817f668f7ee2035e5a1dd7fa0f7fd0","ssdeep":"384:FA4WlJnMIr58ALEgVAY1FKXCr1IxIkb+klNTCTQ2Ah:OZnDWA3K2F7r1IfSkPTAVq","tlshash":"3062c0c0ca79b89648b23eab458870d79f13091821bdbaadfbfd396e15ce0b0ed04515","first_seen":"2025-12-02T06:53:41.461173Z","last_seen":"2026-04-15T14:56:22.367003Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1023,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":792,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-6929889375d0e.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-6929889375d0e.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 25005\r\nlast-modified: Thu, 26 Feb 2026 17:21:05 GMT\r\netag: \"69a08101-61ad\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"7701b828ccef45140442da20bd771b9e","sha1":"b284979598655d99298c591b784fa689911a85e2","sha256":"6dc7a21408a23e174c54a41bbc466a6082a532ab1fd9e5b3c8867a3e3460e925","sha512":"02a390bc565b39b20de6919a6db1508b1ffdf86323213067be1485f7bf019c0daae2b0b716fb566640012669a1ef402de28e36fa801030923ad4e856168672c2","ssdeep":"768:aF5M8Zl/RzOIGazhPQr+DYRwC7h0E2xD3dB:+zOtOhPLDYRwCl0LxDX","tlshash":"11b2d0e8187262ef325e79c28235bfc0d43b59a531726e49e68f58b838b47f14d1218b","first_seen":"2025-12-02T06:53:41.314152Z","last_seen":"2026-04-15T14:56:22.397829Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":880,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/no-module.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/no-module.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 818\r\nlast-modified: Thu, 26 Feb 2026 17:21:10 GMT\r\netag: \"69a08106-332\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":818,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"d75f4fed1f02eaa8ba337396aba2d62b","sha1":"69a1881d79c60eef69e855b04c931eb89f5b4407","sha256":"34ae69c94649c0c3fa3bbf7f73bc62a57f09d45256f876765647141ca59e5503","sha512":"4e99d5b7cd7c4ed7d464b50e1e36e00a8a438411811ea7db531fefd706c11fac4d93e34d76c6690860ccd7c03d726a170c6d62aece14fa4c13ec4dcf55efee4a","ssdeep":"","tlshash":"59016b390ae6582401e392a6f1bf953595b372731184cee2bccd87689f826208772c74","first_seen":"2024-12-02T21:43:54.635902Z","last_seen":"2026-06-15T03:06:03.058637Z","times_seen":19,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://case-battle.net.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:14:12 GMT\r\nexpires: Mon, 15 Mar 2027 05:14:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 32534\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-06-17T08:58:20.730912Z","times_seen":10986,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":26,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-697c6a009a8ab.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-697c6a009a8ab.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 83960\r\nlast-modified: Thu, 26 Feb 2026 17:21:10 GMT\r\netag: \"69a08106-147f8\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83960,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"b2338ec70732839eb2294bd6de799c27","sha1":"f9791f22a573ec72a40c5b6f4196e04059440cc9","sha256":"8debda2eb3e2802f3206f723cfd866b7e3e0eaa641c6077403e4ce20976a877f","sha512":"12def1af27201ee60229a0e76d00b3bca75db8b3fd49c6f2cd20116ae2eb671eda76de87c07cf17e3d568038f2f5ddc2c9922df89928763d2f5e0e55f5c520a8","ssdeep":"1536:TPVmtePWaoUNyEYYvBRRC6gztaJATPxMlhDXnIO5a+9P7SNc8uJc7ekX8bakWK55:TBPWaAEJAESTP0Ddl9Wc8u5qkJr","tlshash":"a7831272db5f88dc816fc066078519c99b08cd9ed5ee0e2ab7a2c62d2c1d75a31df314","first_seen":"2026-03-04T22:41:03.611252Z","last_seen":"2026-05-29T14:16:16.756459Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":906,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-694520ca1e48e.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-694520ca1e48e.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 22876\r\nlast-modified: Thu, 26 Feb 2026 17:21:06 GMT\r\netag: \"69a08102-595c\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22876,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"c900ed7f5ec530b566328d410b2aa50d","sha1":"b80327774026defaa89e710023385fe73c5cb9c2","sha256":"d16a72856cff73ed49b2d52389d3d797520388fb09d5ece11579d6205aa61a80","sha512":"c2333ec3b656432c0ea8ac095826aa826ada8d78037acb814e2199ad924ae17639fc7233c136bda029cc534bb7febc9a000d70a66a3aca3ec386815ed09f9554","ssdeep":"384:FUH3xHIxmaDd6ec5N7RYJms94uM0uW1sXRRSeuUPnF/6XqT5qKdwxrJs/jJfE:KXxHIxmo6ec5N7RFyN1sXRZuUPnFccts","tlshash":"2da2df2dc2bf8f4a511eb9e055fe980f0a1bcbf88c035bcded56914c864e846da90e61","first_seen":"2026-03-04T22:41:03.647912Z","last_seen":"2026-04-15T14:56:22.385632Z","times_seen":11,"resource_available":false,"data":null}},"time_used":828,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":592,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-69452150a6bda.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-69452150a6bda.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 81210\r\nlast-modified: Thu, 26 Feb 2026 17:21:07 GMT\r\netag: \"69a08103-13d3a\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81210,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"f609c701e5a95b194ca3ab2e95403863","sha1":"a53fe725e912df76f17dda9898c40e45197f35e5","sha256":"5e122054f04c3649c64286cd3afe127eace2188c86537e5d775d0f3194ae10e2","sha512":"941f4bf3952c5f84aebb127b4f84644400a4fe55a9d9f827299471925cd5d7c8bb3b8d15eea34affcffeb17c60277ab89d2be0d88ad6cb304c311e6668959aa1","ssdeep":"1536:rSlp7fuUgGBwwyO46xIdnqoQpqktKsLSaQKyCdDMCQ6iz+B5p2UHxqCzU:r+f7geRIdnqSkUuLQWdvKzkpVZzU","tlshash":"da831296481cd44cc033afa11509a096e52ad3ed0cb7a66cce7bf4b47deefb94697009","first_seen":"2026-03-04T22:41:03.609281Z","last_seen":"2026-04-15T14:56:22.41091Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":943,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/mir.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/mir.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1788\r\nlast-modified: Thu, 26 Feb 2026 17:21:10 GMT\r\netag: \"69a08106-6fc\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1788,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 57 x 17, 8-bit/color RGBA, non-interlaced","md5":"c06abdd6c52f0f12efd85ee685885b86","sha1":"82a4486810b3721cced66039591a16a2f48ca24f","sha256":"83c4c99e053d00e0ac170879e873711f1b1c373885f1729cacc3d10fc17e8054","sha512":"962f9fbfa94730ca14c1385ad4c34d60f1973e1902834c623de871eb3f9d98dba40bcaf159fab14511536515317c2d22b9404466a7775add5c09ac9a4d873a2d","ssdeep":"","tlshash":"293109873bd84cbadb344ab116b94b1cfb519050a7f8a52002f9b91b26179c331e0f33","first_seen":"2024-12-02T21:43:54.421861Z","last_seen":"2026-06-15T03:06:03.223569Z","times_seen":48,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/img/svg/icons.svg","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /img/svg/icons.svg HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 17:20:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ee-d3e8\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54248,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b676ea8a82070d4587560c8bd3883594","sha1":"fd6fcd30136b723489c14723c6c37a682684dc3c","sha256":"6a58245471b1dd980261442d568530389ab81eb505eac4db3fbd7a720bb54fbc","sha512":"49e94fab9ef7ed08d6cdf5afce7501bd607c65c9dd824f7a30c8a49ffd2475eb477ed44e4936bcc976e5eb8a7ec282fc078cc79ee70be276827e4ac14e30e075","ssdeep":"1536:ekdRVIfV1NVpIgI1nRLYmpLBjceHDFgPDwjZ4Dh:lLE1","tlshash":"f3330b7253f443fc9ac547184ab818653afd10af75b1d0e87f6f8b449f4a9f29068ea0","first_seen":"2025-06-16T19:50:55.4628Z","last_seen":"2026-06-15T03:06:03.00344Z","times_seen":14,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/15419/thumb-615ea1ff80ecd.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/15419/thumb-615ea1ff80ecd.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1622\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1622,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"acb05d9c4f0705d52e9ccd8c8f64364b","sha1":"149359be380376589d0a6dec0aedd69d2d6adc34","sha256":"1de8075a8d9f844c225861a29d88c4c0113f0914e7b894faef7562f6e43a3f30","sha512":"55955d7b5cab0d3f43054b36f083e0b96f39761749ca947f8354be16b70a10e091402ee21ab6dd3a9fb42f160145877c97b6dec9c24f2b3e188159a40c77a29f","ssdeep":"","tlshash":"ae31b7580ea0493de41c073a4c08876b2620665c9a96af76ccd53bb8cc1c2b3df17d38","first_seen":"2026-03-15T14:17:01.541583Z","last_seen":"2026-03-15T14:18:05.466797Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/9871/thumb-5ddd23b2a00ef.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/9871/thumb-5ddd23b2a00ef.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1413\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1413,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"97b2fd992662ad3103389ec01ecf7a70","sha1":"579ce9a0a07191078160db7d014bb192c7b9657a","sha256":"473ddce99fba39a573000fd6f6d624f1e1dbad50b5685a6e66720aa897f3b4c3","sha512":"fc843d422372bc676b5762e0e5f215560428ab2b9a19a77a6cac66c3d0b4a3b023634cc058083db6555e0cd3d41fedead3c068847606c28d30d4d6ea6bf8cf2d","ssdeep":"","tlshash":"2221a5102f905d21d059033889c94390aae5b7a69e7b3e817a437b58cd38b33dd2a86d","first_seen":"2026-03-15T14:17:01.544119Z","last_seen":"2026-03-15T14:18:05.454961Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/3244/thumb-5c793f2932461.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:25.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/3244/thumb-5c793f2932461.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1425\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1425,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"71233cdbb4296713fe44a8cb39086b80","sha1":"47002a35640c7806b100280091196ec120021130","sha256":"1f7d39cd689d309746fa9d8fe4be7577fab916e72fdda0963a1fe51ddada0b06","sha512":"c1572373d2d9a7448531cfc542b6d598587bee1aa3ee48dce45365758ee6787433302092055fe13795d88d4460bd5f858f486ee98406d597f2cb9f41ee407700","ssdeep":"","tlshash":"6921d8230ae46c62d0ac1b7106c6471a7163b155f3492dd778c07868ce3d573dc79d34","first_seen":"2026-03-15T14:17:01.546441Z","last_seen":"2026-03-15T14:17:01.546441Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":49,"dns":12,"connect":19,"send":0,"wait":18,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-697c69069cbfb.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-697c69069cbfb.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 13546\r\nlast-modified: Thu, 26 Feb 2026 17:21:09 GMT\r\netag: \"69a08105-34ea\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13546,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"c2d0aceae01ca12adb593831a5c7e970","sha1":"82816f0f60511b3b77e5612126a4ad3d3a4aedcc","sha256":"4224c3217c3bd6a5b86d1995e6b26e353e16a5fa84acfe77077b4c80e9ce3b1d","sha512":"1a59de0ab30f0ed2f8660450c7dff6adaf63a57885c37e55bbaf7d9d45a89096c17b2a330fd6cddf2b21716a1d9f6be2afb709e74c8108c628d4f8bd2df16f05","ssdeep":"384:FYvoUEukMfcsqUHajpWWNOaTtdunQIG+jDz7r5fz:a01MRqUHZwOaT/uQILjDz7lr","tlshash":"2452c049d8b4f4caad421d5a031f51ac3fc59e8105b26b2fdbca4e2c55dceb6eee6000","first_seen":"2026-03-04T22:41:03.655998Z","last_seen":"2026-05-29T14:16:16.502253Z","times_seen":9,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/14511/thumb-5fd3531198255.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/14511/thumb-5fd3531198255.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1616\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1616,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"4f3f05eabb3cde96f4ac13fa1bf51125","sha1":"5b55c06c2c34a9fa4a091a312ba031932367739e","sha256":"0104e60a8c7e2be3b1c16bf8c5c8cd1f951ade4ae76eb783a4318128592e9ddc","sha512":"2286ccc08c72473358d355dfbe69ad293d74b7b9d1e9f861192224a57985e7ca346f25922c2cebfe2c643ef23393a011d47afe406991748ea38dbf8703d5f6de","ssdeep":"","tlshash":"cc31fc1d97840f97d0141973cbed646cd107e95869276775c8c136a8ed38b36db11f0c","first_seen":"2026-03-15T14:17:01.550198Z","last_seen":"2026-03-15T14:18:05.439907Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/177/thumb-5c793add5dd53.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:30.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/177/thumb-5c793add5dd53.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:30 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1181\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1181,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"fc759f7ddc116025bbfd60f9dc972a91","sha1":"305c7747a0738c1822ccfccd93f85b7484d6db32","sha256":"29d441d4f7453c7aa31172987cdfce9665e350c860802246f50affa65d5872d2","sha512":"851b7603a571889166b1add9a7623ca247601303a0ba18a5015c044df418824ed29e7055f62995842ae935e8989f0ce93bc8b7767957f3f02060b321b3d9dbe2","ssdeep":"","tlshash":"a62160623b216d26c4dc033995dd0b2a31240538962fae0f2cd0b21cd834332cd38d6d","first_seen":"2026-03-15T14:17:01.552486Z","last_seen":"2026-03-15T14:17:01.552486Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/style.css","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:25.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/style.css HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 17:21:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a08107-40c2e\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":265262,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"b1b4b8c154cdb85ba2a087b1631e59c2","sha1":"a3a7b77543d7ff3a9223522848f073328cef4d12","sha256":"877d7687a0e16fb7f775cd5f46445b97f1afb9a4dca01087bc57f1143e06790d","sha512":"373bd50242b2efff1d76da64c40b6e0c904637b58019591bbdeea21d2000a11beee5a2e8ec45785a03480f21fabc9de57895cd2c9815cb552feaf1eb312953ad","ssdeep":"6144:i0IttOkIkZAwO12AZkaDb3ayg5JrMe60aTfx:i0IttOkBZAwO12AZkaDb3ayg5JrMe60o","tlshash":"5344d84789621269a167ca1de3c4ae586b3cc223c1232edf7255a41fcbcb6d603e7747","first_seen":"2026-03-15T14:17:01.554613Z","last_seen":"2026-03-15T14:18:05.39886Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/logo-footer.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/logo-footer.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 3233\r\nlast-modified: Thu, 26 Feb 2026 17:20:48 GMT\r\netag: \"69a080f0-ca1\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3233,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 201 x 36, 8-bit/color RGBA, non-interlaced","md5":"0641184e6c2b6f840adda47ce4836243","sha1":"d12368f7ff673aa56fc1b4aee98042fab25165e9","sha256":"7323b1551ad0fd2d1f80bcc0a71633c33e0ad2da323b895743d157f4a15c6fdf","sha512":"19e174aa038c0ceb82d4ab1117a5bf9de2800ef9bb6da84fbb6e1e74fa59b90f830908e00e812157ed1a8ff641acf36b9fa48e3af11dfe5b0a6f978a68eaefe0","ssdeep":"","tlshash":"6a615cc6fa1fbd8874cc165a4f84b5985a63ed0d57e2df8ac3118a814b2383bc27042b","first_seen":"2024-12-02T21:43:54.417983Z","last_seen":"2026-06-15T03:06:03.136562Z","times_seen":46,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://case-battle.net.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:14:12 GMT\r\nexpires: Mon, 15 Mar 2027 05:14:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 32535\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-06-17T08:58:20.730912Z","times_seen":10986,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":170,"dns":0,"connect":42,"send":0,"wait":10,"receive":1,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/1174/thumb-5c793cd5bc527.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/1174/thumb-5c793cd5bc527.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1459\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1459,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"46735f2f908508bc3a542bb6a17b4fb6","sha1":"16dd2cfc9e90e34ba873f8e97e54515c11e9f201","sha256":"79eaebb869a7152d579026134fb5143f8607a8c5f2a1651a7f9665fe3b088664","sha512":"52a5290ed3cfe01696c94b3d463f3ccd76ad88e6054e34020073c620d82838247f3410786d6698cd3b4b979247ca521d70d8fc7f832a932ccd14831e6c4a8acf","ssdeep":"","tlshash":"5d31d81636521911d00c4ab144a857f26be1722af2d72cccbe003849cbf9fb3c53ae55","first_seen":"2026-03-15T14:17:01.557863Z","last_seen":"2026-03-15T14:18:05.504998Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/13/thumb-5c793a495442c.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:30.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/13/thumb-5c793a495442c.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:30 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1224\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1224,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"97359ca4323141483f1d2faadd689d93","sha1":"8ff551093fd6b1f92d5bb244b32b8643ad4076f3","sha256":"b6f27bd831624c3338a283b88a360d6ff8e89012e753edef39dc2481d49c5318","sha512":"81ea3cc2a2029139630bcf0b9679aaaf43295a23113dacfca6efd6da409c44cf8cd3a92c6148443f30e6691b6f86c35f59b3f375966ea653102e11a0eb2564eb","ssdeep":"","tlshash":"aa2163e41bb04c45d64c03ba7ed9831232b0752c92670a967cc3b128cc2573bdc2680e","first_seen":"2026-03-15T14:17:01.559605Z","last_seen":"2026-03-15T14:17:01.559605Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/thumb-5c793f65e0836.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/thumb-5c793f65e0836.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 3684\r\nlast-modified: Thu, 26 Feb 2026 17:21:12 GMT\r\netag: \"69a08108-e64\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3684,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"d4c17f517c3fd3d86b9931fd8a57f75c","sha1":"8ba218d1a07615165323562ab75498c02b8a447b","sha256":"d5ecd3a3febb40cce39a96e1a9134fcde4db7ad3bcd4dc8d10914ff23268c028","sha512":"127831b6c950dbcf91f422d69293af6d812e22139e3f2f6b0d6ad8a23ee2b1e9be06da295a53f385be14d27603c8dc0f586cd5c03956e190f8ec71748c591f42","ssdeep":"","tlshash":"31716ed159991cbbaf75dc1c594a7585a42613b362b70be090d0bdc462b4f8d24f0bbc","first_seen":"2026-03-15T14:17:01.561429Z","last_seen":"2026-03-15T14:18:05.409063Z","times_seen":2,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/utils-672d59ec.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/utils-672d59ec.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/index_files/live-drops.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 17:21:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a08109-89b\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2203,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2202)","md5":"a12b459b9ac3f8dc9b2642f4702444dd","sha1":"c27c65e9b2cc7dffe85d9924be2165218dbd1f67","sha256":"3b57259b52b1dbbad0f032f4f63551d44f8e100df1e7c3bcef8154c6934e8e94","sha512":"7ebe14f359b9da774ed693d0cc7180b8f12e3f73baca62a37616b90385f37a7a25f9520f304b6b7616bf1c3fa09cca98625df40e741479efadeb6377a7dd280d","ssdeep":"","tlshash":"674163e93384b477c397106294ff461bf5386ac4694b2019c06cb4d23e22c309bf7d99","first_seen":"2026-03-15T14:17:01.563044Z","last_seen":"2026-03-28T19:42:48.563864Z","times_seen":3,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-695fcc551e0be.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-695fcc551e0be.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 86672\r\nlast-modified: Thu, 26 Feb 2026 17:21:07 GMT\r\netag: \"69a08103-15290\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86672,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"d04adfc3733d2cd8821437a2c72ad7b1","sha1":"0044f02db90f190c20a46cf42eed4039ee926731","sha256":"048b714b40a5b641ae958b274763b7191dae5f261d80bf77c36f8af00b272f94","sha512":"e8be6813354b21c7993067596b037f4f02313fac76615339c1e95049dac8d0f32f8e2d4c98e8728b707ed93c48d8cf398061ed075a8bb97b770945f554acf89f","ssdeep":"1536:qDlNxhMZiW0RJuzZYoUWoPY2Gl3SrHMGoa/eZ9FSKCCX8:+vhMiPtGl3AHduPFTY","tlshash":"c78302aec7e043f5c10bb0298b10be054a35d7bd38c15c9e1a1da53e3cdbd555e62a72","first_seen":"2026-03-04T22:41:03.593541Z","last_seen":"2026-05-29T14:16:16.717641Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":913,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-694521d56548b.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-694521d56548b.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 80543\r\nlast-modified: Thu, 26 Feb 2026 17:21:07 GMT\r\netag: \"69a08103-13a9f\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80543,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"539285114417d9cb260714a02186793b","sha1":"ed83cd78f272c0a138690e76e5e1728c73e50dc0","sha256":"41e3cadd568c7eed7981e153b700c77ebe53593c0a4f1bada6bc12556a3789a6","sha512":"f0f6e95aa2377a21313ed2c26b66a75fd80beea60d77b4d007eac45258f99395418724b28f47104be45d030de6edbf97e220323ca9d223d712bcb4c3334f831f","ssdeep":"1536:EgFNZdI/k1YUYvnEkWGujqb08n6CSSQgCUU5mH2xeyRbZDubNgn5ee15hpAgoc:EgTZK1UjU08n6CSSPCUj+XRFDuJ65eex","tlshash":"f473123ed804a244935f3b1afb740bc6d8c1229266705d4e720d25bfccdc9a653b3a2b","first_seen":"2026-03-04T22:41:03.631476Z","last_seen":"2026-04-15T14:56:22.411524Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":944,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/1212/thumb-5c793ced5d0b6.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/1212/thumb-5c793ced5d0b6.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1411\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1411,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"cb8935cbbe8e2c105dddbaeb9a60b126","sha1":"8b89c58931ecf2dfd686b517a5a4aae571498e44","sha256":"4688ff2b1a7bb724d1ae49bd2c685eb08c3b91b2afa3875e97bd336626a39729","sha512":"d6543d151542a2eb13836032041ae477a28798595dcfb44fcd6dee40a4269887974a99ae1a708a526d0928ce2c1a77f998f45509fb005f52adcbf278b43a20e5","ssdeep":"","tlshash":"5621d829a7620c46f84c077a1a5a83475672af5c66977f173c83b025ad70b22c64b91a","first_seen":"2026-03-15T14:17:01.566328Z","last_seen":"2026-03-15T14:18:05.499222Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/index-9ccd359e.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/index-9ccd359e.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/index_files/live-drops.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 121\r\nlast-modified: Thu, 26 Feb 2026 17:20:47 GMT\r\netag: \"69a080ef-79\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"bbeabbec08974e7fada73a157256a1fa","sha1":"f72a529dbe00c5b2e940fa7859bfaecee92f80a5","sha256":"7ee4af3b53befe68dbbcc0819c6828fdb95289ac86f8be1c20a46a3d32ade00d","sha512":"776831f3cc25483a09d0224636e4a35c23f88973cbe8289c046a05815f98d2d86a08251eacf4ed62c77d752f6d23facceba36b6b53248c953901b34bbf28d028","ssdeep":"","tlshash":"7fb02bccb00067f1934903a1041f040b951c8460301dc780c240a1c42b31120c93fd4c","first_seen":"2024-12-02T21:43:54.581917Z","last_seen":"2026-06-15T03:06:03.1018Z","times_seen":21,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://case-battle.net.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:14:12 GMT\r\nexpires: Mon, 15 Mar 2027 05:14:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 32534\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-06-17T08:58:20.730912Z","times_seen":10986,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":96,"dns":1,"connect":37,"send":0,"wait":40,"receive":2,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-697c624219fc8.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-697c624219fc8.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 19814\r\nlast-modified: Thu, 26 Feb 2026 17:21:09 GMT\r\netag: \"69a08105-4d66\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19814,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"0e00f6ff2662858ba5058c6d8e1c703f","sha1":"6f4c83ad989b5f60e464c98cd5b3cf9598b941a0","sha256":"bc34c23aa550f09dc2882a3d6046005bda8fcfc538117936c2d3354bdbca89b8","sha512":"61527a077d02a0dd7338080d7388b1245f135203af19ac59e6d34b486376d53e79e9b228ae50332845e0745905677566badaccc9d1ca202850772733c3fe5d13","ssdeep":"384:FOM9b4pFABYWUhz7U2DpBGlHCtQjvzrKxyUq9AQTw2aZ8IzGQpeZl1:UquvNRU2yitQjvHKFCA5XzGQQ1","tlshash":"7e92c0956320e694c7065a44131669636fb306ee30d109746ef8b64bb2f43bc3ee2dda","first_seen":"2026-03-04T22:41:03.58764Z","last_seen":"2026-05-29T14:16:16.752691Z","times_seen":10,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-15T14:16:25.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:25 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 26 Feb 2026 17:20:44 GMT\r\netag: W/\"591f4-64bbd5737cb0e\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":365044,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (39315)","md5":"a722497cd9e94ac3ba95a1e02b42a423","sha1":"811683b51dfc59679c4e7e046246f97e1577fd38","sha256":"cb280d91d001fa1d3eda1b41a493334a6715dbd2bfc9068a38d06cb362cf5497","sha512":"0bbc7d47719e458f9cc5bc978cae11fa30fcf627f1608dc6ee043119d60aa0e3ee28039afbaab7df0df35fbc3ddf3109d5230ec73d93b44e7383e6d9a0b6c024","ssdeep":"6144:0TyMTEUc9+iDdxydrohlirbqiAmVeGprovZplOQrNnnWZvQq6:u9iC6","tlshash":"d4747232f3d505b3514381d295533f7d2efa966aeb620cb0f26e23e22b92cc76a17514","first_seen":"2026-03-15T14:17:01.569554Z","last_seen":"2026-03-15T14:18:05.38266Z","times_seen":2,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":128,"dns":69,"connect":28,"send":0,"wait":143,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/overlay-static.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/overlay-static.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 7040\r\nlast-modified: Thu, 26 Feb 2026 17:21:11 GMT\r\netag: \"69a08107-1b80\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7040,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 251 x 292, 8-bit/color RGBA, non-interlaced","md5":"844c6cb82accad20cc952401a829ff77","sha1":"752e033573ebb61aa3561d5c1dacbc139d1fd714","sha256":"b4ec48c643d92ac3292ba7a36c684adc62ddff3b126b050b24e69d88c4cf0b24","sha512":"dd9cda4006f9c54cf276f4b62d9d1299eb55d5225d9e38d30dcd89878981c8d1e2bc0508c8370b1b73f48f144a1250dd0db2e3fa9ea3c04b91b264538080ec8b","ssdeep":"96:CSnJ/ZZcvD++A/wtYLc4K00Lr98Zc8/hD1gOum1rqwBTdazALZZZMESFGHOZsc5/:CSnl+Uw4G98hD1gO/1+GedEHc5WI","tlshash":"e9e13ac5f153445fe99b7ab9e11f1c1790d17098fe00aab85b030b1fa1029b9506b9af","first_seen":"2026-03-15T14:17:01.571948Z","last_seen":"2026-03-15T14:18:05.50239Z","times_seen":2,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/funds-form.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/funds-form.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 17:20:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ef-818f\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33167,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (32622)","md5":"490b7759d959fb704d53fe9ae12b6131","sha1":"2beb3e3bfbfcb4bbb8728e1610eeb5e003b99e3b","sha256":"0dfad1ecf9af2e07cc8889ed8bc11ef1d4bce9c5fe9ff74714caba3af845db04","sha512":"87ad0440b89998aa21c2fce2fec209e66dcfa5d6f4df575438a403b3ecc0cd027dd8f916f1eb0800b0ff5337d5ce574d8f959315011f138db5cf27aab054f058","ssdeep":"384:zL3nJEbxLbD5eDdndsaD0ETWOPSMxB6YIOy+vDS108ul4F4sGuskLc9LQtJL3e:/JEbxfCdnPYXMn6pmDQ08ul4F4XuwcLu","tlshash":"7ce2ea857165b1bf162f48ab54ab4001f33164566c0f4d40eafcac4639a8b8c56fbfbe","first_seen":"2026-03-15T14:17:01.573766Z","last_seen":"2026-03-28T19:42:48.632872Z","times_seen":3,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/SVG-062b764d.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/SVG-062b764d.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/index_files/funds-form.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 17:21:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a08107-4f6\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1270,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1269)","md5":"ebb2e9996169ae667642f11593e667d6","sha1":"01a65e258951d9acc1068b3d7de0729681e3cf14","sha256":"603d888363930c99da5e25278832b60798bdccff993124a9bb7262f7ac702518","sha512":"73957e2689e9dc9cefdf3246805ccd023f0350db45e9b61e5380fe120f623e44f7f5af01e59dbe640543af2cc68e53b5193e935a6465db2ebeebaad4c2eb4821","ssdeep":"","tlshash":"ad21814ee473b3be957828d07164a04053034927cbb08ab181b928b624fc34862befdd","first_seen":"2026-01-26T15:47:31.240947Z","last_seen":"2026-06-15T03:06:03.090284Z","times_seen":12,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-695fcc9b7b5a4.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-695fcc9b7b5a4.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 86796\r\nlast-modified: Thu, 26 Feb 2026 17:21:08 GMT\r\netag: \"69a08104-1530c\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86796,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"bf3059264c3a58681a00b7c1ae49bb95","sha1":"81215913af38b25ebb42a9c909c341cfaaf83be9","sha256":"e6ad67dfae9e5a01ff83fb1dc549b08a79eacfc8ec8e269bb06542bdd7c4ce78","sha512":"f2ce27a56d0b9eeb0d73a76003c141455e824d281fb292a2b2f1a102bb3736e2b5bc196a88f4a216e74111a65d1ca0125452d55c10d4c7cc671f33372f722d44","ssdeep":"1536:/uFtOZV987Y0NBxKLhm9jXQu6nM1e31Rw4Y6pQXa/OArg4Ka3mzKRtOV:iCVaY0P0L5u6se3XlY6P/zrQ6WV","tlshash":"ca83029bbbdc06b4dd3db2498d6fb51ab6678476330bd09c4f0114c371e6a2e45e2e28","first_seen":"2026-03-04T22:41:03.580408Z","last_seen":"2026-05-29T14:16:16.563122Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":914,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/14571/thumb-5fd48169f2eef.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:30.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/14571/thumb-5fd48169f2eef.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:30 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1860\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1860,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9d823935a467e7708362169d4eca1fea","sha1":"69d43ca187f2a8d27e15e510250d5252c0ec8b0c","sha256":"d6807b3d8cf496ee82e1c84f3e6fc690922988e5bfb468ddfbb279ead9aea9d2","sha512":"fc8eda402fa5e936163a97024027c7c30359a0d21089b31d78d8e2c9e6955fa3f81064cb2cb0a7001d0c77e1fcbd9cf2f85d1d422719f651259c3f1fd713199b","ssdeep":"","tlshash":"0131eb651e160c09c6ad163c0098da2475b623d5963beb47a811f04ceab977bd81ddf8","first_seen":"2026-03-15T14:17:01.578301Z","last_seen":"2026-03-15T14:17:01.578301Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/921/thumb-5c793c8ac0dd7.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:31.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/921/thumb-5c793c8ac0dd7.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:32 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1820\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1820,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1124b150a496679fec760325bba64dc9","sha1":"0ede63ec60942b710ed228c2f09741c9e3200be4","sha256":"1d50021765631ef6957b56e8b00a9939934c2ddfc713922067718c2cb5914931","sha512":"e36a6addffea1838830b27cc9cfb6d851f2946cd33665801d24ecbd8776bd14e13a5f49e7fbb43539fff9649adb051014bae1eb17f9c8e48cd3740b0be5142f8","ssdeep":"","tlshash":"0931740956b16923d00943b085ad8b7ebfa4f7a4512b4b705a213229fa78339fad1c6c","first_seen":"2026-03-15T14:17:01.57985Z","last_seen":"2026-03-15T14:17:01.57985Z","times_seen":1,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/support.js.download","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:25.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/support.js.download HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 21 Jul 2025 23:44:29 GMT\r\netag: W/\"bbd7c-63a790e80b3c5\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":769404,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22012)","md5":"6fbfaae347fe2704abee1ecefcd27e67","sha1":"10c950c18acf09b9a2f1c5e682cbbf1da02fb746","sha256":"a2a67cb7dfb8005a96bf8499ea8870be0fefe296bda6082de7f94522f2370051","sha512":"dd512cbc17f40a6f5b7928452d9ac30322ff2158ac858da8cc61dbc437c598cf3abf9caf470b629d1443e362d3ff84ea80fb03e5adb5f62f3fbbaac5d69e985a","ssdeep":"6144:c0T9gq5TgX8gscru33oyBsQ70t6o1ysZAUEPusTCNwPdvgJ:R3oyBsQ70t6o1y8ArdeJ","tlshash":"43f409c8abf02c5e921b86316c3f89c6f30a76d4b6fc4407694df791e25e116f226678","first_seen":"2025-10-07T11:27:36.102306Z","last_seen":"2026-06-09T08:51:38.975557Z","times_seen":8,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/case_new.svg","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/case_new.svg HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 17:20:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ee-7ce\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5fa0fc159287f97cced8e84993a11fe9","sha1":"a4b5245b7a6a820b6aa7230cbf58d290f4f9e981","sha256":"a30c3d3c5ee552c7073e25af1d0397908e8b73000b568883954019eefb39b1ed","sha512":"b357bcff804dedcb8f636d0ad41e57758c944d8b8e68df56e0ca0e4503bbd5e362b5b39b9585bef498fb1e46210c861dce8c200f5f919cc702e601631258547c","ssdeep":"","tlshash":"8b4194f2d3e52c25f44c87d4c6246049be10248be191e3f4f4ceae493f224e2889c954","first_seen":"2025-06-27T04:58:45.862319Z","last_seen":"2026-05-29T14:16:16.534156Z","times_seen":53,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/webcocket.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/webcocket.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 17:21:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a08109-a260\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41568,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (6734)","md5":"6cd559da7442eeb7066e5dd61b70f730","sha1":"7db58b91d5f2c91a2d8d9b002457419c4be8889d","sha256":"1ccd5ae04be72f7e0a2aad1ad5bcfb7f161b83d5e98632248be012b3c42bf3f5","sha512":"7277c98166b5f18901020080e50015505155b0b218f9c41326a989efe3ebd65a180dec5325219eb569f5f1670a03594f951438c701d5049a3651f55522312aae","ssdeep":"768:A4kVHI8iIGteNh/120zI6iV1GWDABlrpFZ5p8wn9+2CEXp36ojoh5/c1fJGp:Ib/dVoh5D","tlshash":"191332095a991caed71672247ccb3a47204d113b9ada8e8874dccbd0dfe87d8212777b","first_seen":"2026-03-15T14:17:01.583411Z","last_seen":"2026-03-15T14:18:05.450233Z","times_seen":2,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/homepage.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/homepage.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 17:20:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ef-11d7\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4567,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4541)","md5":"c7d396ab1f0d42300d6a3ed1905aad59","sha1":"969060284e72d16270281d23948e9962c3692362","sha256":"8ca0f6325fdeba2a006de7827d69862d1b710c5c80f34bce389ad5bfc20f7833","sha512":"528778d14823e5455d9603396494bf137e92685eb3e43e808634f7c69be5e2ed8315988fccc5503a0244ef18df73efef77a3416163101383b8cd97036d22cf33","ssdeep":"96:+eslRZ/0GRbj4n2GEg/jg/Igh5p2r1X3QXO008w+/nvgIAI2DO0mJEUUjr:+esGrD/jwPuQXDXw+/nvgIAIemJg","tlshash":"a29121857191f86d29ed8365b2a407e33232b0ac7544852cb43cede69c0ac45b2ff6f1","first_seen":"2026-01-26T15:47:31.268295Z","last_seen":"2026-04-15T14:56:22.390752Z","times_seen":8,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/img/svg/icons.svg?1","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /img/svg/icons.svg?1 HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 17:20:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ee-d3e8\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54248,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b676ea8a82070d4587560c8bd3883594","sha1":"fd6fcd30136b723489c14723c6c37a682684dc3c","sha256":"6a58245471b1dd980261442d568530389ab81eb505eac4db3fbd7a720bb54fbc","sha512":"49e94fab9ef7ed08d6cdf5afce7501bd607c65c9dd824f7a30c8a49ffd2475eb477ed44e4936bcc976e5eb8a7ec282fc078cc79ee70be276827e4ac14e30e075","ssdeep":"1536:ekdRVIfV1NVpIgI1nRLYmpLBjceHDFgPDwjZ4Dh:lLE1","tlshash":"f3330b7253f443fc9ac547184ab818653afd10af75b1d0e87f6f8b449f4a9f29068ea0","first_seen":"2025-06-16T19:50:55.4628Z","last_seen":"2026-06-15T03:06:03.00344Z","times_seen":14,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-697c622d8c712.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-697c622d8c712.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 93358\r\nlast-modified: Thu, 26 Feb 2026 17:21:09 GMT\r\netag: \"69a08105-16cae\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93358,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"d18142d742e784845dc3f9dd5787d5e4","sha1":"20b25abbd9099afa31b7d425775190d8e7624328","sha256":"8b035bb711affad8a9d66165ba44d0ac83e84dbfd4c59360aad77778537c54c3","sha512":"2c71603497bf28a3ed05f955ff60a675512b72073f4ceb64bb5325ce69b267f61093549dd4248bc1b89309cf07ac691c4f325c9912e05d34bc15460a6e09701f","ssdeep":"1536:NFYWhfiqqkKDvCcCmIruplSrkq7bqmYlYI2riELPyRBMi5vt2PN22aeAmXpyhMmS:wWhfiq2CbmiuplSgqbYlYIsrWRBx2PNT","tlshash":"c8931265a6f854676f7e580829da7cecc04a4b135f5c3da34a4b30b628b841d13e3e63","first_seen":"2026-03-04T22:41:03.670202Z","last_seen":"2026-05-29T14:16:16.600003Z","times_seen":10,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.verbox.ru/support/support.js?h=8210a71e65c7008a8529b00a3c7397fe","fqdn":"admin.verbox.ru","domain":"verbox.ru","tld":"ru"},"ip":{"addr":"185.71.66.141","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"verbox.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:27:06 GMT","end":"Sat, 02 May 2026 19:27:05 GMT"},"fingerprint":{"sha1":"53:30:88:9B:ED:F2:2E:31:F0:7B:7A:74:7C:ED:51:25:45:EE:04:BD","sha256":"90:A2:1B:D6:15:4C:29:8C:D0:C9:2B:F5:53:74:DE:C2:62:B8:C8:F9:9A:BE:46:BA:73:78:C9:8E:B0:B9:91:96"}}},"request":{"raw":"GET /support/support.js?h=8210a71e65c7008a8529b00a3c7397fe HTTP/1.1\r\nHost: admin.verbox.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 15 Mar 2026 14:16:27 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 27 Nov 2024 09:53:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6746ec14-3172\"\r\nCache-Control: no-cache\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12658,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (12658), with no line terminators","md5":"2c0ed1563d1b7fe190c7c2ffc865f0be","sha1":"7ce9bb52cb80082608c8eea1cf5669f76a5a9cb2","sha256":"058b036843fe1fb45fb5a558a6c0788ffb00b3a713048256663c9728f12e55f9","sha512":"b6690edb14ce989249a3ad7922c1eb987780d7b07f515b77c3a12d3ec74e96625636767ade63b5c8bf11a8314cc15919d211ab09ee3f995adf92b5d1e2874e67","ssdeep":"384:3j5GIKm/prTzS96d0A3fbtwKEu8k053515b0CjuHNi2Sc:UIKmlna7uS3Ttbxc","tlshash":"68422ac8396bf4b707ea5085043f2507f2780ca8541adc98fb05cc9678b49ab86aff74","first_seen":"2024-12-01T03:25:27.864449Z","last_seen":"2026-06-15T22:00:16.51051Z","times_seen":1067,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":132,"dns":13,"connect":57,"send":0,"wait":48,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/img/snowflakes.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /img/snowflakes.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/index_files/style(1).css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1405\r\nlast-modified: Thu, 26 Feb 2026 17:20:45 GMT\r\netag: \"69a080ed-57d\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1405,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"4f3714084606fa996d8d4ef68b63b541","sha1":"085a0e40e3b85bd0e00cc4dc487cb334486836b2","sha256":"efbed527010be203c7b36eb8b9b4f2c49a2316ee6ca040aa912fb6fcab2691eb","sha512":"23f9f1cc0e10dfd40053d95aa682d2a4eddb3d7c4aefbf19fa3a60ac6ab61ec6a9e96e34afb4cf54128801c0b39c73fe365edb9ea848b38132385a21c500c440","ssdeep":"","tlshash":"3b218610b2904c05d04d17fa40884624751953ec92dabe966945f51cd66c7f2dc36c2a","first_seen":"2026-01-26T15:47:31.287421Z","last_seen":"2026-03-15T14:18:05.389901Z","times_seen":4,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/2910/thumb-5c793efa20c3a.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/2910/thumb-5c793efa20c3a.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1766\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1766,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"6ca1be43cb48a4ced6520cfc88a72405","sha1":"e91e0ccc56eca78e11705f233f5429980a3b1bcc","sha256":"b30a8ce4bf4ca0cac639e2f6bedc61f82b562ed658f733525292d92b5b6021f5","sha512":"6d7b7f1334f372554ddbd3ddcdac27cc4f1a4a8a0eeb236bb0c27bcb995f7a9676bff1fdf407b405e009f6fe68a1f2a7a755eb8436030de3ded44dbc1a9afc91","ssdeep":"","tlshash":"d431cd2a5f749d22d06c173c0c8952191be1503c7355be6bfe873b319935735f929c26","first_seen":"2026-03-15T14:17:01.589127Z","last_seen":"2026-03-15T14:18:05.437023Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/239/thumb-5c793b19bc6af.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/239/thumb-5c793b19bc6af.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1335\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: EXPIRED\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1335,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2eeee73a17434eb5946731aa8d902000","sha1":"2ec95e163f392c0368af4e0920b647dd968c9a17","sha256":"59d94685d4b176a70466cb79abd80d12fa72a954c5b491cd1c42dcc8dad2c6f0","sha512":"ba547e438db515141c75207645f1312bb6d2939b487ae6c91cdeaa6051ef2b0043a57f00e7aca7e26de8f8b831cff2aec09c2918cc557e962b2284258f4c8ffa","ssdeep":"","tlshash":"6f21c53036f63cd6e80e4ff55868071237d1ba1eb2374e9ba9c837054918633c914c24","first_seen":"2026-03-15T14:17:01.59042Z","last_seen":"2026-03-15T14:18:05.443441Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/logo.svg","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:25.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/logo.svg HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 17:20:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080f0-fec\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4076,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22f9412632bb953686722c2a01b88c15","sha1":"3cb25412d277edcdc9d395110322f1ba3adae624","sha256":"8def07276eb151a09123b873de4c35382387b68e90c77b6698f9b7d0dd42fcca","sha512":"cf3c89b8ba39477dee3254f8bd9dbbd0514736104c0f0ef69305bff5c7ab6532248818787db038c4a28d035704a138260b60de0ff5e1da56b1ec99db9551efd3","ssdeep":"","tlshash":"3381227e73a4875a94d1d7088e68349933a895d771a881ecfb0fde97af084f380b5d60","first_seen":"2026-01-26T15:47:31.325031Z","last_seen":"2026-05-29T14:16:16.60611Z","times_seen":11,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/18845/thumb-68dfc8d3d7b48.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/18845/thumb-68dfc8d3d7b48.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1942\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1942,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"eef1cbc308434770abfdb2fbe9fa2332","sha1":"761073737aab855eecacae32586854f7874892cb","sha256":"c7d884463071b3d99e3a861d7b12a0b2ac79234556a9ddf8d46012f236741cc1","sha512":"5b56c017ea62e830f4c71a0cf6a88baa5d04859d06a88b3b1cf357f85472d06146d46c09d60a977e1e7a9efe063cad4d4feaccb8c5f6a0b48ec930da568dbb5b","ssdeep":"","tlshash":"9f41d9f156540a2fd02cc57d6094c162669666f017635bee9c4937068c786f8ea22d3a","first_seen":"2026-03-15T14:17:01.592839Z","last_seen":"2026-03-15T14:17:01.592839Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/visa.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/visa.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1919\r\nlast-modified: Thu, 26 Feb 2026 17:21:13 GMT\r\netag: \"69a08109-77f\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1919,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 16, 8-bit/color RGBA, non-interlaced","md5":"1e0239cf745d6aa181e5775d610d39e7","sha1":"3f74a6afdeed9e57e674db2dc4f57349f706accd","sha256":"d5892934372ed9555441d05159ad17a97d1a1dd0730ecec1489590012a7802ad","sha512":"ad102939426f6c7496de476cf719f6889543d635f6ed684c1fe0ff84b6dcbc9e50ee0cea81d4b7a1fc6c728afa2f3bce3a22a5e0e5d15a1aa62ecaf624368c81","ssdeep":"","tlshash":"f4411bb66f987cbd1c8400156dd425e0d27730d2c3c7fd455f8a4bd3f21ea0551e28a8","first_seen":"2024-12-02T21:43:54.419265Z","last_seen":"2026-06-15T03:06:03.137328Z","times_seen":48,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-6945224f9c78f.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-6945224f9c78f.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 75520\r\nlast-modified: Thu, 26 Feb 2026 17:21:07 GMT\r\netag: \"69a08103-12700\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75520,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"0f3f80fd8e599879e103f156be705dd9","sha1":"c22431fcafeefedaee3f4aac37ce4bc0b4f5fdc7","sha256":"21cb5cfa771c236a837efe847cfe60b543adb600abea06939e811f494bc2ff1d","sha512":"53a617d484009f40e6fa0b13ad4127310d763ba87371f0a249c5df4379f7e53f1a43f3f58a59df20f97ce43ae2a2c3066b44e62622d103f78e3424d1420039f0","ssdeep":"1536:/WjQY+PqAYn7JTN/x8+oUkJ9dfXHPj5dK/Bi3FxCdfflNUWy2wGo:uk7PzmZx8+VkPdfXvjHK/Bi3SnEW77o","tlshash":"e57312a58f396b0bb2c516cf72022f7de8fc632d64bde8441951d584df08b0e305caa6","first_seen":"2026-03-04T22:41:03.625794Z","last_seen":"2026-04-15T14:56:22.402821Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":945,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/15620/thumb-673a1a0b1aaac.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/15620/thumb-673a1a0b1aaac.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1942\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1942,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"967fade55f2681ee01df1e18cec6c898","sha1":"1a109f8c345bf39d73408c720b2a8266905a8c1e","sha256":"a413084c19b4a6ac1b31a8f72082ff0e09b505615a574938958d6a1ce2eac0a2","sha512":"fed8b1ba6283b18f8352c84562ea53f1dea0ea7c95d192239f45bb1d7095f96a2ab2ddead702c703af1719c11945ed73d66a88a9381a2c177f7fdcf7bad7e5d1","ssdeep":"","tlshash":"6a41f79c21d44e57d00c0ef001ccda46a351c60a565f17eb6ca57700dd39abac82d9a7","first_seen":"2026-03-15T14:17:01.595526Z","last_seen":"2026-03-15T14:17:01.595526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/index-044fc01b.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/index-044fc01b.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/index_files/live-drops.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 792\r\nlast-modified: Thu, 26 Feb 2026 17:20:47 GMT\r\netag: \"69a080ef-318\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":792,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (791)","md5":"c3c3a916c4da76bedb22e640dd00efdb","sha1":"3db8825d4dccc5284352e6f052e35d95c4418d47","sha256":"d7b621280ffcce085e9c1c3bb086fc0f5a55b3d934eab236bcee959f6416568a","sha512":"74826d7ac6d93c25b94c80711ea66672865ed00a717ba52fb3e38881ba8390324c9b464ff6a9551e65c2d1ae5117795164a22c8426cfa9a2a8413b0a3da92693","ssdeep":"","tlshash":"d601ce9c7a91b0be85940cd080df6865c6399c063146e94485b4ac47ae33bee619bb4d","first_seen":"2026-03-15T14:17:01.59676Z","last_seen":"2026-03-28T19:42:48.646003Z","times_seen":3,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/img/bg_pointer.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /img/bg_pointer.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 949\r\nlast-modified: Thu, 26 Feb 2026 17:20:45 GMT\r\netag: \"69a080ed-3b5\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":949,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 44, 8-bit/color RGBA, non-interlaced","md5":"eeb0f384646d2743df5e734a0666ff80","sha1":"f919ec770f23542e08c2ffb8ca6bcf021da9ee31","sha256":"94bd0282a0c86c43227228ed4efc11755b939c9c0a7cb1bf022a582108a9d71d","sha512":"a6698d5168eeb2c09ebc6d5b6c21fcade158603dfe0100b52284beccd816ff776853d92a6c7e65f8b8069ab10380aef8cf6e59a40259d772975e06d5fbed416e","ssdeep":"","tlshash":"bf11949ec2aaab7e745670f896851f4049221932e96ca2753253e2338a98b90afd4851","first_seen":"2024-12-02T21:43:54.444197Z","last_seen":"2026-05-29T14:16:16.743275Z","times_seen":41,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-697c635011ea0.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-697c635011ea0.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 90758\r\nlast-modified: Thu, 26 Feb 2026 17:21:09 GMT\r\netag: \"69a08105-16286\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90758,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"3122b282fcdcda28ed005d8a8259cfdf","sha1":"01e8c1355d56ec5e2483e78ba136bb9d16cbc947","sha256":"d6afa654c6d8eafffbdaacf0115ad49ff8750be5bb8de27486984f581f3dbb8a","sha512":"d3a2450cc19aa5e8f53f676395b8550002444297e7b2d609f6ef2c8bbde2c558644f8f23de16e99fc83c360a11a1212fedc72020f06847e491f4dce08c0fcf0f","ssdeep":"1536:NjAoXl+kGLbGtP6XHKiIHwh1FQlMV/0HWgbnW4nTEjubuPchZRU9o:G4ooYHpIQ/FQlMVcjDNT4ubuPU7U9o","tlshash":"a89312a3a5f3efbbad00276ef9c5011e7a3447a3d4aacf9909e1c06b755054ac927423","first_seen":"2026-03-04T22:41:03.639082Z","last_seen":"2026-04-19T19:19:23.528407Z","times_seen":5,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-6929882b7393d.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-6929882b7393d.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 23047\r\nlast-modified: Thu, 26 Feb 2026 17:21:05 GMT\r\netag: \"69a08101-5a07\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23047,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"de40ddedd34d100263c7508a012e69a3","sha1":"19851a6dac959ef12142f5b9fa39a0694d026c34","sha256":"cb8d20d13274388414367f9520257726f5f01cd6009192ace80e62209f66a904","sha512":"33f42e0bf2f6039fc054999afa2e69208c64c9fce6042e65953b181d0fde672974e40a5beea85926100d0510fe03c04577fbc29b47f142ef351aaf486bbca7b9","ssdeep":"384:F8Khw+HujwN9G+CxRPP8obPB3EUCuHAR3x5EhvQA0kZPFF1NW/4HNHviSslnfqF:ThDunrxxP8sx3C53x6vw+JNHthslnfqF","tlshash":"d6a2cf50298cbcd68713e8a40ac2e1ee09160b1872de9d6c8601f6e9d97d73ace53f57","first_seen":"2025-12-02T06:53:41.613843Z","last_seen":"2026-04-15T14:56:22.370992Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":873,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-6960fddab6ed7.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-6960fddab6ed7.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 11143\r\nlast-modified: Thu, 26 Feb 2026 17:21:08 GMT\r\netag: \"69a08104-2b87\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11143,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"a8ad0c056c6704f209b979e79fe7ab9c","sha1":"667c1055e006aebcd1fb708f716b2ef774a8dc94","sha256":"e8987326f253546baafbf862028e901c56260ccc7333b1e36ae6037b6cc2d2e9","sha512":"c5538324510db3a93e5b7d8c28c976d577243be340f2b950f3d87a15c490de1ba60c228e7151ca613dddac455e85412a32aef9f2637bf8d3eaef52310ef75158","ssdeep":"192:KSz7KHmqRSIo473DcKYShuZKvPAgxByLOEB5qsFDG5viyZ4Qrpof:F/KGGSIl7TcKFuZKnJByLOEBUIDSFGf","tlshash":"4b32b0eeb87c81386f845eb735b70c5e19183642ae52f5d233749df02286e2d5da4b03","first_seen":"2026-03-04T22:41:03.654559Z","last_seen":"2026-05-29T14:16:16.701332Z","times_seen":8,"resource_available":false,"data":null}},"time_used":739,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":502,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-69452165905f8.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-69452165905f8.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 24655\r\nlast-modified: Thu, 26 Feb 2026 17:21:07 GMT\r\netag: \"69a08103-604f\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24655,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"b131137ddddd5ff9c13ff361fab8d54e","sha1":"71860ee3514eb1f3eff997caf49ddc1500085ad6","sha256":"a12484d334ec37023889ce00c148315a1cba898aa714fd18e4a672db5e1a69e9","sha512":"388986e34c699158864c51ebc52e3489925cebc466eea5ab68112c5da1d13cb5c009d1f2c1e20a0b95cc52b70f6cd0a5352231b0e0c0acff3f7ab2a7f44028c7","ssdeep":"768:TgKdaDslO1o9vpuRmeNR5nO0UDDV9y+fo:sK0w+yMmC5n8DDy","tlshash":"4db2e08c54dde111a6189b049ed45e40e958d90216ca4e02fc5f6f0eba277ed98fa35c","first_seen":"2026-03-04T22:41:03.616876Z","last_seen":"2026-04-15T14:56:22.387578Z","times_seen":11,"resource_available":false,"data":null}},"time_used":958,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":724,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/18847/thumb-67271f87e6ea1.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/18847/thumb-67271f87e6ea1.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1973\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1973,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b194adc9d094264e2a831f11364f8983","sha1":"2c2acf81b1d55ef30d5633ef6438354acb4c4a68","sha256":"e1fc6da7991f0ce4e61196c54c37f13f1e84b0a2ffd8211c207e6e8a89e76810","sha512":"459733f2660fd57c4599865db4c2c21f96ea0b7182fddf509f68126dbd0d8544d6b927efb83e3d40652d8d44a8f497dde4ff2d0465ad378bbc2a867c4b3a0871","ssdeep":"","tlshash":"4341c613dba08fa7f86c1778c41d9a0aa365c40c9e3b9a99a500f153e939663ecd1821","first_seen":"2026-03-15T14:17:01.60325Z","last_seen":"2026-03-15T14:18:05.474755Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/14387/thumb-5f38dbcb2655e.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/14387/thumb-5f38dbcb2655e.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1357\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1357,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1758159bfc0a00ec61278f68b9fe3eda","sha1":"9344a83d2a3228b52b507a48ac088aa440931e88","sha256":"f07af828493279981420eec527fad5db168817556647bf515801da8c43868671","sha512":"a47aea8dcab1e21c3f6c9dd7e11065e7f0d6b099fa9fb73ed82bde8cc2fa90af7db1c87c97a9b3803dbf93d6da1d1e0954dea3c50f17adb4f2d759f5d781c885","ssdeep":"","tlshash":"f921c83437604c65d5dc8332005847e333d5721886ef67944941ba5ccd30bb3cf2a934","first_seen":"2026-03-15T14:17:01.604726Z","last_seen":"2026-03-15T14:18:05.431236Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/10827/thumb-5e92fb42880ec.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:25.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/10827/thumb-5e92fb42880ec.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1586\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1586,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"138dffffbba8b6c83248d9446f949fe3","sha1":"f74a1a0713ffd54e7ea94bc7ea2b9fd33b7e7cd6","sha256":"92ac4197eccc7dc8132a4c05b01caff46b0a3389c4c6e56770c3cfcb5cf74cc3","sha512":"f983c8bdf3366add6b50c892b3bc9cf9f366c1c7c6473d7e9bcdc45a92885fccaa0d7edf6c51b2df7a542772808644b7440620f3efe31254b954451ebb7e7dc0","ssdeep":"","tlshash":"fe31c9183f752b02e41c467c854893211690a19c2273fe86a502b81cdb6033ec935d2f","first_seen":"2026-03-15T14:17:01.606177Z","last_seen":"2026-03-15T14:17:01.606177Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":40,"dns":8,"connect":22,"send":0,"wait":44,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/corner-right.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/corner-right.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 4115\r\nlast-modified: Thu, 26 Feb 2026 17:20:47 GMT\r\netag: \"69a080ef-1013\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 101, 8-bit/color RGBA, non-interlaced","md5":"f2be5e3aaeec42a7145894a26d4a2e0c","sha1":"91654bb92c84643c812fdd0f9854b1c837732e47","sha256":"75942929e40a7a147132f64268555f27894a2fc36f6436c0e2353523ff563bab","sha512":"6db40851c92c708f76fa4a089e5f4a32b04f317b12f72fc0b0156fc8d6db47003992234d8db186de5d5b0dab363f606cb451a3f3258cb4959395c69660239e93","ssdeep":"96:qwJXURsuac+lwQv4uKGQgUYkxQJv6sGfKtfyz/VHu0bMR+X0nD9Ck:tJkPaeQv4uKZg6f/fA6bVOCgCk","tlshash":"0e816dcddf72106b9cca836e516814b518fd9fd5148f89440dc0d746984d8ea00d1aed","first_seen":"2024-12-02T21:43:54.416067Z","last_seen":"2026-05-03T16:04:13.116996Z","times_seen":41,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/img/promo-dots.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /img/promo-dots.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 189\r\nlast-modified: Thu, 26 Feb 2026 17:20:45 GMT\r\netag: \"69a080ed-bd\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":189,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 8 x 8, 8-bit/color RGBA, non-interlaced","md5":"911ad940a835c458334ae3358fdbb707","sha1":"6fd9e374cd81086e996d84a194ef98c4690ed588","sha256":"059984b576609317df2196b5c7716143421cece37eb14f2e6c0a1247e559cd75","sha512":"ede922ddb2001a9b9e08f6d47bf21e97e9a87e0293b1c1010f6cec99f47073b61d25a07f2d868c7eb28bd0fddd0c995a183d08b083115060418d4de13179a678","ssdeep":"","tlshash":"02c0c0e6d1f0bdd4c77583f71d7e0113a6733c60b9d6817f808008702d106b223200c4","first_seen":"2024-12-02T21:43:54.438515Z","last_seen":"2026-05-29T14:16:16.751131Z","times_seen":41,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-694521e35ddca.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-694521e35ddca.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 14704\r\nlast-modified: Thu, 26 Feb 2026 17:21:07 GMT\r\netag: \"69a08103-3970\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"037a7c349f15355c37fafe3808942be0","sha1":"c2abcb8daa0c93ebe76cb9ab9df591381c177192","sha256":"536a6e953a50e81178290aafbd6a46d8cf1c3b09f08a8abc36a0490eebf68e8a","sha512":"50fc903798af6631024682ee940d6135dd2515dc87593327ae51e2c82bad4ba921f827f4fb0f87ae9eb8629c69c5bffed807aea598e402fa1309e8edced8e773","ssdeep":"384:Fxiv2QlzmXSdJq32t4OcCkVu5mE0Den7fk:alqXWJEoFcCkI5mE0Dq7fk","tlshash":"9c62bf7029bce7854d169725b3020f0fe92a2a0205dd61ea93d25d9429b4d8f6c5cbef","first_seen":"2026-03-04T22:41:03.595285Z","last_seen":"2026-04-15T14:56:22.401185Z","times_seen":11,"resource_available":false,"data":null}},"time_used":985,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":752,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/7568/thumb-5c7948c9b3306.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/7568/thumb-5c7948c9b3306.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1622\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1622,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"82526b3075357fb0307d152073d0f5ec","sha1":"c6448c30fd1f0cb50e2c193872800932bd77a321","sha256":"5c024a842a7fa978e07623e137b70ff0f04134cb3b491f2049717d6b9eac8558","sha512":"6a183f295d71960e0e061a67171783c99c7a7d377d49815449a53d45079563f752d3f48fdce02f887609a97d62ddaf8b7ef9a15e5cfcfd86f5fa7b00ad0df60e","ssdeep":"","tlshash":"9231d76a63184613f59d43355008d2b737c1b2a8f37f66a54e8074f8ced07f1cc16929","first_seen":"2026-03-15T14:17:01.611489Z","last_seen":"2026-03-15T14:18:05.491707Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/2818/thumb-5c793ec199d69.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:29.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/2818/thumb-5c793ec199d69.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:29 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1538\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1538,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7bb7e9d672f2ca21819a4408fba92149","sha1":"a431ded6c0b6e5a30e13c24b02d67f4c64123cd4","sha256":"9b8987e156f770a2f8deeb6b4234d94892e8772793032a669789dc1fe558d094","sha512":"38ac3f9b95334cd8c817a9aedb5112d0e66fba443328adafffa6472761fe7502e7b66070e5ca52b975c46ed6021ff77b0fc4363bdabb48a108937c71fb3219b9","ssdeep":"","tlshash":"5831c92537b11e81c01c133401988a6277a4e965bfdb2b49bd00701c9abeb77d437955","first_seen":"2026-03-15T14:17:01.613742Z","last_seen":"2026-03-15T14:17:01.613742Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/1350/thumb-5c793d3b8d27f.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/1350/thumb-5c793d3b8d27f.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1325\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: EXPIRED\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1325,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"29c330fa56ce3424539db2dca7424d73","sha1":"94824df6be15737916b5350b62492d91dd316bac","sha256":"e4c8433d5cbe15c9e5603a2a390fceabed8c6828878028abec7f08960e47b432","sha512":"28b24e8ac4e1cbcd1ca9bf0744298b92f081b4e6369a23c35c5e9f58cf7fc11176e07a11c4b603077a50b93f95682fbee7840132c1038b9c791f6e0df8e4da90","ssdeep":"","tlshash":"8921ea587b10aa80f47c47792158998873adf3ecc3165b059c97fc42e921773cd21d2b","first_seen":"2026-03-15T14:17:01.615801Z","last_seen":"2026-03-15T14:18:05.468898Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/22478/thumb-69737ee2011c1.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/22478/thumb-69737ee2011c1.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1725\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1725,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"91cc1f611877d3ba31d18c40f6d82571","sha1":"c91c11061f77447d2f8cc9936343539c9ccdfd40","sha256":"06ee39b9a468392ecf5d6976c306e7a90f3038e254ec6af88c85998491045abc","sha512":"2b43618df0e93001ce92f50fadcf59e9f15979bcb72e83e4e5447da75e47713c01be61052e27af21a6b830268575acab890a44292d720acbee70af18bcb02ecc","ssdeep":"","tlshash":"8e31a84416d50c66e0a413b958d10b0f67d6aa754b35aec375427045e9b93b5cc11c27","first_seen":"2026-03-15T14:17:01.617641Z","last_seen":"2026-03-15T14:18:05.492951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300,400,600,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.25.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Open+Sans:300,400,600,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 15 Mar 2026 14:16:26 GMT\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23176,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"49148aa6aa83030c8107b048340b6d45","sha1":"0120fa4085b32b021b14aeae199e5dfade9bbf78","sha256":"c9232eb823d220300177aba31f7efd6e78e0ccdef46558336f8ede5a6efbfdc4","sha512":"2e5514ec03270ebe0019fbafead0722e2ab5e87b3ddc3e2c6a2beab2ab4ca36d6fa22835e6a88827eaba8f0fc9f0819a94e69fe3049539a389076b6baa8521fd","ssdeep":"192:NCddw24WrqKnbqGIwV4Mrz7xCAAN21/rqbnbqGIwV4RazqbCuuH2PlrqxnbqGIw3:0AYqY4tjXqY4ahhqY4tU8qY4Z","tlshash":"3ba22ba00027185063431de623de7e34ee0fa2657048d0766bfd8b9beedad6963b435d","first_seen":"2025-09-17T06:09:26.673739Z","last_seen":"2026-06-17T08:51:39.695033Z","times_seen":15290,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":92,"dns":0,"connect":9,"send":0,"wait":19,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/img/bg-main.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /img/bg-main.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 258096\r\nlast-modified: Thu, 26 Feb 2026 17:20:45 GMT\r\netag: \"69a080ed-3f030\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":258096,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1900 x 862, 8-bit/color RGBA, non-interlaced","md5":"b42109bbec3ce99ecead3805d39f33b0","sha1":"f33f663cf70ce8d97ac4c03224f2aea42514a7fc","sha256":"1a4bcf236af80547187f6daeb446dd532b76a83befb6f55b255cc99f416290c0","sha512":"c2a5ba369b637997007eab87cb819c9f4f096b17ee3b1b0f8f6f156bdf568b9625748cff70ade44f1d5a6545c818aebf7a5356ad31dae695eed7a0c73a0711ad","ssdeep":"6144:nQox9X6IapS2fv8wd+FEkDhuYDb7ph7Thq:nTTapS0fd+iupS","tlshash":"fa441212d1f7eb8d9d6706b60066af030b17b29ea6f64c1dfe41dc8dca6ad80f052b15","first_seen":"2024-12-02T21:43:54.594474Z","last_seen":"2026-05-03T17:50:22.648897Z","times_seen":41,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-6960fcf4abcc3.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-6960fcf4abcc3.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 20157\r\nlast-modified: Thu, 26 Feb 2026 17:21:08 GMT\r\netag: \"69a08104-4ebd\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20157,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"ebb7075acb3ee2fd17ed8710e59786de","sha1":"ec6f3a55d5583e881bbe15948fe98f6ed05faeb5","sha256":"49d7183dbea3d942d777532c0ac82d7a854571a3a3a61fc7f347ecebdd018585","sha512":"76e33acf718204a1f8999fda8df0b5d4f1eff1fddbc13d0f01180f628d56dfd5350fc04cb926e2aadca016352215f7a6ab792736e8a8c5684bdd6ad2ca4e2f94","ssdeep":"384:Fy2DMdkCCqwKs+cyd7dvbFoiYb1yyZw09aAHc6bSP5FdaXn:74dk8gw+db1yQ9hNGBF6","tlshash":"8292d0f00456e56c23da047ad3bc18f3e7558b03ea559cc644bd0098f8a918aee2dcbe","first_seen":"2026-03-04T22:41:03.643106Z","last_seen":"2026-05-29T14:16:16.553113Z","times_seen":8,"resource_available":false,"data":null}},"time_used":701,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":463,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-69298797b3c60.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-69298797b3c60.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 19059\r\nlast-modified: Thu, 26 Feb 2026 17:21:05 GMT\r\netag: \"69a08101-4a73\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19059,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"7268f3d77469ef1ca80129a56a7cdf4d","sha1":"c3e50e47dc87c2ef9bf06c0f27f602cb934ad428","sha256":"3c67973d5537c783284b0262c80e406e37ae6d3ce1a349d30249b198f74163ae","sha512":"9f12091e4a644e9cd5b033ec5052bd85022c400386f198879186a2dbccd3528773fd2fad84bf1a6846aba7c1138694672a8ff9ff23081a69706c1e2459c91c22","ssdeep":"384:FvX8eTA/jRq5IGhqvsJsW9DmVStF5tp+XRzX5maCo1hO6YySM:Z8TSPhqvSmQtFB+RX5FjFYyl","tlshash":"4182d0d26f35f9945d12295c5cc1083bfc67fd4967fca472cb2be955a0b98ae01c0c62","first_seen":"2025-12-02T06:53:41.320392Z","last_seen":"2026-04-15T14:56:22.367773Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1076,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":846,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/giveaway-icon.svg","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:25.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/giveaway-icon.svg HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 17:20:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ef-6d9\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1753,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ceae9ac313a7ecb3a8629b0aecceb857","sha1":"9703701e31698a750389917ce6b10dca27a3b13d","sha256":"88ae3070c4a123bdbdee5963f68f8489195856358487bc6e8be1bee7ad4c744d","sha512":"3e91d42305fd340c951a97e11f1dce745bd369778598339dc692d14a3964269f4c29250af7c5ade3d039597dff8f12d2d4d90b52e1929251b5f4c35ca2914e2a","ssdeep":"","tlshash":"ba312d58d384c7fa7de1422892e42c8172b49dbbe474e2e4a7ff1451dd9c0e1651cacd","first_seen":"2025-06-16T19:50:55.77131Z","last_seen":"2026-06-15T03:06:03.219013Z","times_seen":59,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/15061/thumb-609f76998c18f.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:25.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/15061/thumb-609f76998c18f.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1683\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1683,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"07142b745afa4d22e1350d40f4977f95","sha1":"7f7a544387558ca61882f31dfccf3bb9cc4848f8","sha256":"6cb60888196121d61ed5e65ea44c88b9e718d018942b0204595f41f07cff5e90","sha512":"fd41f9cc70086abd7d8b93f650231320094866a277d3536e0082715f8b6f8ac68d046dc7e9bad89d875f232f8b9cb816ff1ec762336d19cdbbded66f0c96be31","ssdeep":"","tlshash":"68312a14d2c42c11d3840278cae5a311e268019868323bfbacc036b8922c373caa5e15","first_seen":"2026-03-15T14:17:01.625514Z","last_seen":"2026-03-15T14:17:01.625514Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":42,"dns":11,"connect":19,"send":0,"wait":33,"receive":2,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://case-battle.net.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:12:14 GMT\r\nexpires: Mon, 15 Mar 2027 05:12:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 32653\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-17T10:30:46.688547Z","times_seen":287293,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":222,"dns":1,"connect":37,"send":0,"wait":8,"receive":2,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://case-battle.net.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 14:51:50 GMT\r\nexpires: Fri, 12 Mar 2027 14:51:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 257076\r\nlast-modified: Mon, 15 Sep 2025 16:30:01 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35156, version 1.0","md5":"062c1f2aaf2d4de07ad2a2f21c17ffc0","sha1":"3fd1f07343bd33a53cd374f7f107dbdf9effae03","sha256":"d5bab8e28732fe3d10dcef4f77b9c248605bbb2a87d289a2539251ceafab536a","sha512":"7ab522d8bc41128be5a15f2cb91f851f6dc5e437afbb90e6191bbe63d9b94a35911f04701fb2b291362b2ae0f0cc639dec2d15e53928afc5769590a2937e81cf","ssdeep":"768:is48okTArkNSgZJAf5jkRcaUNt8wrNPCbJktQV+n+NUB/wo8IEH:5hNTtNSgZJMjkRBUMwrNPC9NV+n+o81H","tlshash":"22f2e172c3787192ae0985760d60cec8986bb2098f7658b0143fdd38ee45345a3f6e6c","first_seen":"2025-05-29T19:30:52.507782Z","last_seen":"2026-06-17T09:33:30.2731Z","times_seen":20125,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":25,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-697c68e2c5fb6.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-697c68e2c5fb6.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 88770\r\nlast-modified: Thu, 26 Feb 2026 17:21:09 GMT\r\netag: \"69a08105-15ac2\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88770,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"d021fba5372169f9518afdf920648c5f","sha1":"8fed51fde01b6c00936b8d85ba74c0e3b1ec5ef7","sha256":"970ad78b67ec64e65ae0cf7ebb70afc04792f318cb39226ce42afb9cb4f75e5c","sha512":"9987404cca06498e726013b60f7eb20a083aab085124f933b572dd4756ff395a4d26beda2d246e1a114ea2612b727365b2b820e5781a4dbbfdd0a4f23ad0ddf2","ssdeep":"1536:+repBmipCDZgg8GKt9jc5CJmqUVDlqQuxXnpyJBOXUkyEJuwAQUTCvfPLH5epFcs:+repBZCt8UVp9uV0OVyE8wAQUT8b5MFD","tlshash":"728312297b9be15ff28f46354671d1e75988ea9e5ab37818cb50c3628ff05ff200a061","first_seen":"2026-03-04T22:41:03.59441Z","last_seen":"2026-05-29T14:16:16.465497Z","times_seen":9,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/229/thumb-5c793b115b8a0.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/229/thumb-5c793b115b8a0.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1315\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: EXPIRED\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1315,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1fb036fcaf05df9b9f1306b1cc8c6488","sha1":"b79658fd54f1c81d8079235fa784400944a6944a","sha256":"47f18e87c6c28a1a3272083d2301be5936b96cf7d0191bbc9e74c7f133d45738","sha512":"2d3d9cb50443ac109137f7e75251315a6b68753ffeb903de7698fd856cfb32b63b31135d69d2370a7362bc144fa9a42c0b4f82c77253349446d0ca4b00354147","ssdeep":"","tlshash":"d221870127e8adf1e40d87f548a90b813f51de5877361f277cc5371a4934063da15939","first_seen":"2026-03-15T14:17:01.629726Z","last_seen":"2026-03-15T14:18:05.496007Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/style(1).css","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:25.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/style(1).css HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 17:21:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a08107-838\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2104,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2103)","md5":"af88a9b977ecc26150bfa7f87206f01e","sha1":"b63bd65813d6fea250fbc378c420f20883dcb7d1","sha256":"4eee991ef2fbbb07f8feccf7ff36674eb03c8f7eee416df84ef59a0e59e93417","sha512":"d9822cb1db93593dc833e47b8bcd3c646ab916d96ba4e27078e9abc54ad60c1e722b1bf5e0eb2d25cf7ac915ce6320ccc8d878042b316e1a08728e1b573722fb","ssdeep":"","tlshash":"fb410f8a92d9121df0e78499760152ea07fa3853fb211ebdf2a9c2f39b811d353132c5","first_seen":"2026-01-26T15:47:31.297599Z","last_seen":"2026-03-15T14:18:05.501701Z","times_seen":4,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/steam-login.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:25.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/steam-login.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 4932\r\nlast-modified: Thu, 26 Feb 2026 17:21:11 GMT\r\netag: \"69a08107-1344\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4932,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 127 x 39, 8-bit/color RGBA, non-interlaced","md5":"93c055e9b41186982f1dda43b482eed4","sha1":"27b601899fd3ba7c98d68671ed05545601242132","sha256":"4af78e1af1afb39c847995190a01234e211ad3bccbc498b2149852ead1c4b9b8","sha512":"775f4726b6f21267271b58964abbe90ac4e3b6baaf3be8087c86e3a45bb23f4bec70362588ef82995a956c7636bd26432a703690d45a89c8960a2cfdb2990dec","ssdeep":"96:DiKrUlfyR3wUCfOXPQLis/b+KSefaUd6cuupGg/48xJhAOllgNBMH9zumRt9:DRrUlKR3dQLixKtfiv5g48xJhzQqzu69","tlshash":"81a17e8d4c83f0aaf4565f90ea0a967e81eb9610fc8b40dc80061b4d21dc8b956dbfc5","first_seen":"2024-12-02T21:43:54.411985Z","last_seen":"2026-06-15T03:06:03.125387Z","times_seen":48,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/live-drops.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/live-drops.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 17:20:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080f0-bd87\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48519,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (402)","md5":"58f3f8fc635ad3d216969e88b3896e14","sha1":"a7909db66e4ca65c8c57a7a525b5e6bdcf6b7846","sha256":"6c73a8e55e6a9d6a08e932d05bfb7a9c20887bacd6caecb424ca3f4d470b1e63","sha512":"8aaf4203bca93a0bc719592dd80d343c1f14f31f088cdc761f9ad0033501c7a362e44f6aaede9f7ba4b88c79e694648de5290348935c041fb973c56e9f6df2a9","ssdeep":"768:GoYedpEKH8w3FsP2ccnfcaeVbgOraiUDPiUIVmXaaoYo2eee6yHkgodiNZYge:mebxcM+2EbbgOraTDPiUKmPeeedkgAAc","tlshash":"73232c5a26f11530e203f0355a6fd9086a29905f6d8afd093d2c6194af1c93cdbfafe4","first_seen":"2026-03-15T14:17:01.635415Z","last_seen":"2026-03-15T14:18:05.424668Z","times_seen":2,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/index-512be0f5.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/index-512be0f5.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/index_files/live-drops.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 17:20:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ef-3d10\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15632,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15631)","md5":"01356655de9fabe6ddb7dc45b145bfc2","sha1":"4415dce775eeba55c2fa0132a3af45a3822eebb0","sha256":"29aa1d7fcf4d8b7b832ecf2ac618c8a5fe3e036b905796593e58a52624ebcf42","sha512":"49c07e67b19811c1571f95e22e704829b7c5a90f59ca8559b5b71293d89724ab2370a063a74c1cba31125681b55919f8fcace7cc117bbb329f491a43df8c9d6e","ssdeep":"384:wf70pCb4BMYWYWvxg3PJAvr9xHbG+59uH8DrmPR+V/VtfT7v0K:wf7/EByvxg/JAvr9xf59uH8DrmPR+vtR","tlshash":"276273ad3680b17657a644b690bf015af3347544340780a0e17dbcdb3e726ae46ebfac","first_seen":"2026-03-15T14:17:01.637485Z","last_seen":"2026-03-28T19:42:48.606817Z","times_seen":3,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://case-battle.net.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:12:14 GMT\r\nexpires: Mon, 15 Mar 2027 05:12:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 32652\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-17T10:30:46.688547Z","times_seen":287293,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-694520bc857b8.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-694520bc857b8.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 85873\r\nlast-modified: Thu, 26 Feb 2026 17:21:06 GMT\r\netag: \"69a08102-14f71\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85873,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"616dbd96c3926ee7e963b24b57273dea","sha1":"b48396e82bb31a05823f045e0607ed5893cf3946","sha256":"4acd669fa9ab6f00967293f74c5063d1da0dab4a5dd04b6a5fd80a38650b0e13","sha512":"521e90c82a89dffabf10262d00db299faba1dd8306b68ee71c5b8de72f10d29f79654c86e177c04450e8d1bb48cf41f66bc1b868dfbfbcb90fd2ca85fc5b6d7a","ssdeep":"1536:pM+9PXmOekXypePFHOt0AXGPe50BD8qzZnC7sZg5MnAZlGntPZ:pM+9PXmOeLpeNut0AX6JVn1DtB","tlshash":"548312de3cc8b04fe28dd2784e9d369ac2d5cf2959e8b40da196d8ea620cd03bd1446c","first_seen":"2026-03-04T22:41:03.630563Z","last_seen":"2026-04-15T14:56:22.387025Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":917,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-6945210a8aef4.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-6945210a8aef4.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 18555\r\nlast-modified: Thu, 26 Feb 2026 17:21:07 GMT\r\netag: \"69a08103-487b\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18555,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"7f8e860ddce2046db803110d9f27867d","sha1":"86d61ccd446f6cb000295b8ff9e65922decfde2b","sha256":"6002c6625d675b0600f2f5fcc89a08bdc1b14d9dc010e075956d9040d908b97c","sha512":"ed3c013e49a2141cca326842c2bfd338f588ec4badfc38d50dea85957954dfab007c4b6a9288b0ed08b7505aa20a96d06ccb0512b8a493a06525c1e23d5495dd","ssdeep":"384:FvTfyp8v3HCZ2nPo+e5uQcYIhXk6m7vW9VhpbXwVHDs24pYPYCrWE3:BLypsS5AVmjWlpbXOjsXqPYuWQ","tlshash":"e982d09d86dcf5d0b96c27b51c91eda099a3e06298c717943167ff671120f8f90b8387","first_seen":"2026-03-04T22:41:03.666353Z","last_seen":"2026-04-15T14:56:22.393443Z","times_seen":11,"resource_available":false,"data":null}},"time_used":895,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":660,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/760/thumb-673a184b021b6.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:30.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/760/thumb-673a184b021b6.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:30 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1556\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: EXPIRED\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1556,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"a50b2d489353246a3ca8ea29b5ef1b5e","sha1":"34259429419b6d5f68232946dd56a65e86726057","sha256":"8956929b5c27894b8d8a7c0aacd4650424b8b0cbc09c1dc0edb0bde95e456c7b","sha512":"d2a7c1f1117931813681a11355537c77268e66af40e0d988cc93bbca4b9928f9b0cac8a864b7b25336d8810430a5308f42d159eef346564f18ea8c22e2d87ed4","ssdeep":"","tlshash":"0931199567c40b69f0ec0bb01ad6db023772d258a32b2b9d701a3a11c878dffcc2d814","first_seen":"2026-03-15T14:17:01.643055Z","last_seen":"2026-03-15T14:17:01.643055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/img/ico-limit.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /img/ico-limit.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 913\r\nlast-modified: Thu, 26 Feb 2026 17:20:45 GMT\r\netag: \"69a080ed-391\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":913,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 27 x 22, 8-bit/color RGBA, non-interlaced","md5":"6fbc3d657f5ccec961bf90dc0871efa9","sha1":"ab1bf7e7e1eb57d8dfd4750b6716fc6d24e783b3","sha256":"8a9f504e9ed7e9bf15a53097790f4b507a653d8e8c111f74c20fa3cbc12f19b6","sha512":"ec4cf155653f400132cddf823bf8dde926dd667166478e7e74d51c4adf1ff403b5bc313875dd749185c376422aa5d6fd9d49db9d948dfae269c646d40a6226cd","ssdeep":"","tlshash":"2d11b7f3e0946550e220642cc27114f709f300b05722c84e5838477595e021ff71a6ee","first_seen":"2024-12-02T21:43:54.447295Z","last_seen":"2026-05-03T17:50:22.642612Z","times_seen":36,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/middle-6929871130a0d.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/middle-6929871130a0d.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 25959\r\nlast-modified: Thu, 26 Feb 2026 17:21:05 GMT\r\netag: \"69a08101-6567\"\r\nexpires: Wed, 29 Apr 2026 14:16:27 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25959,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"79a7636caa63ca01f76d478e8b3efe54","sha1":"9fc89bb3214cb7d1e81fe0c3220745839fc3761e","sha256":"203314f88a82f890a46e8cf4fb68aea5ce143bf3c69653f9f2d9e111b2dae09a","sha512":"e6cdcd2100226e0a310e0fc053c2792a26839eb8d5224decca37942973f4e57595cfaf0fbba898d7fbe90b45c6dfb7479230cd1690cd6e0786284d0973a1124d","ssdeep":"384:FLDUXzJ4kEjfZiwnb9u4+4skIWM6b1ZMRoGH695UH1l1V1/wa+Rr97dteQOFm6WV:Bc4luKs2M6xcH/NPwzRr9dtexZWhT","tlshash":"99c2e19aa32d578ef07a3291513a3dc26a300d511ba46b65cd8a061ffcdf4ecf809745","first_seen":"2025-12-02T06:53:41.577645Z","last_seen":"2026-04-15T14:56:22.391517Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1051,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":820,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desktopfiles.pro/ditzsecvpoqugodejhmrwpgbzezafruzbmhyizgkjmpyvn","fqdn":"desktopfiles.pro","domain":"desktopfiles.pro","tld":"pro"},"ip":{"addr":"89.19.212.52","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desktopfiles.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 18:35:49 GMT","end":"Sat, 09 May 2026 18:35:48 GMT"},"fingerprint":{"sha1":"FF:E7:56:12:13:89:33:50:2F:89:E2:E2:29:DA:E9:C4:60:46:A6:FA","sha256":"60:C0:FC:8E:0A:75:E5:37:97:9E:0E:0D:E8:6D:37:17:1E:52:93:C7:A1:F9:A7:90:5F:72:C4:99:AD:9C:55:0C"}}},"request":{"raw":"POST /ditzsecvpoqugodejhmrwpgbzezafruzbmhyizgkjmpyvn HTTP/1.1\r\nHost: desktopfiles.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 156\r\nOrigin: https://case-battle.net.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":156,"data":"d=case-battle.net.ru\u0026u=f-mmru8drb-wi6bi4c2\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0"}},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 59\r\nETag: W/\"3b-q1dL3bpZwQ3Vk5LZlMhxCbA1BMU\"\r\nDate: Sun, 15 Mar 2026 14:16:28 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":59,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a0fc974c944cc40a34ed5236ecf437f3","sha1":"ab574bddba59c10dd59392d994c87109b03504c5","sha256":"97dfe0cafc309f0921c9d90cdc8531f7fe7e2be9b5e181cbd079637604b2adc0","sha512":"65ec386c3c88c6b8b32a89bce34aa02c7aa08f06bcbd0cbfc40e6efe23af423e7f64294021da62953bb6f15fcf802362cfbc8d0b042673f3c708cd52ed71ba88","ssdeep":"","tlshash":"3ca002c5491065fc4513080e824e1b81463d001569c5608ee00d0944a5e605a6116133","first_seen":"2026-03-15T14:17:01.650002Z","last_seen":"2026-03-15T14:17:01.650002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":113,"dns":67,"connect":20,"send":0,"wait":138,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/live-drops.jpg","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:25.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/live-drops.jpg HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5917\r\nlast-modified: Thu, 26 Feb 2026 17:20:47 GMT\r\netag: \"69a080ef-171d\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5917,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 100x68, components 3","md5":"a4720326855bc5f6ae753834a8831c6e","sha1":"7d08e13a893c190e98524688cedd54e0da0c22c8","sha256":"1ed4ddde66046447f32c4f2193330c6069318ec62bec97833c45224906af2a0b","sha512":"a9bf5556d1246cd2a59d31a1d3ced0c0c13750c65654b6a6fe58edb25c673e65ce896f62471a3f3c2887191a0f34380891896d7d4ccb10e8686eee6387353649","ssdeep":"96:pN26MT0D5MdtbZPAVwzVHAILjnElu0ozyahRCqE1SXb1F38t86:4YNMtKwFAILgkzyahZxL1F3C86","tlshash":"b2c14d3fee9acf17f9e1e67420f1eb907386721ed3635e8920995a2532812c44b4d16b","first_seen":"2025-06-16T19:50:55.425481Z","last_seen":"2026-06-15T03:06:03.219822Z","times_seen":45,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/489/thumb-5c793baab066d.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/489/thumb-5c793baab066d.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1238\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"831510c72cf6aa3573c79099eaae56bd","sha1":"0c9c39a573444c73c82d09284e1bcf7e9e7e3999","sha256":"8772d326930d6b572303ce75cf25ffa9be16ab41aef336bd0c7dfe2f3a41990a","sha512":"955e4b5edaea96a34c235b13f1797da78b917733fa1eaf639cd8e258e54b11a2766bceb5c77c1c3acfc115d04ec7954430faf10a8da2e33027be489afceeb0cb","ssdeep":"","tlshash":"0c21cad4bb6088c0f0281335008c4963b7a4faeb933a4b93dc92b0d9cc11b72cd23c1a","first_seen":"2026-03-15T14:17:01.65311Z","last_seen":"2026-03-15T14:17:01.65311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/img/svg/funds-form.svg","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /img/svg/funds-form.svg HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 17:20:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ee-38c3\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14531,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1bb42a82847526b11dadb94771cbba25","sha1":"a03193208b8fc447b3d0b5c9d648c967fc7b0fae","sha256":"a676b438b775a8101ef2bf29afd5ec688367f7e78c5e996bf97dbd7a89e24e7b","sha512":"9b731bfcebc4c9ab2bc328afcdeecb8e4af84cfae045d36091fb8b8ebb993356a0c3d79f6973ce907ed40277f99840bde0f0dcc76e19305516153e6b1d635992","ssdeep":"384:IRBD41UdF05VajbztEoV+xDMf2NHU8enbODMnkS:InD4eF0TaZEE+xQFbhnkS","tlshash":"6362565e9b732af49c4587d19d2106b03f1f907f2eab8378c294d770ba164fcc8919a6","first_seen":"2024-12-02T21:43:54.602171Z","last_seen":"2026-06-15T03:06:03.026809Z","times_seen":54,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://case-battle.net.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:12:14 GMT\r\nexpires: Mon, 15 Mar 2027 05:12:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 32652\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-17T10:30:46.688547Z","times_seen":287293,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":110,"dns":0,"connect":7,"send":0,"wait":8,"receive":10,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://case-battle.net.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:14:12 GMT\r\nexpires: Mon, 15 Mar 2027 05:14:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 32535\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-06-17T08:58:20.730912Z","times_seen":10986,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":153,"dns":1,"connect":21,"send":0,"wait":8,"receive":1,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/10824/thumb-673a17b1b45bd.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:25.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/10824/thumb-673a17b1b45bd.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1908\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1908,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2bf06c9a7748b6463d7ea634e4a81832","sha1":"c3e65628fef5c2fcbe0ac67659c42dba14530d82","sha256":"ce9814e9e9cf525ceba7fa4d6dd8bd7199376e00fccdfe09702fcda4dd66f52a","sha512":"535b758361ebd03c74824ac79c6c1e1f9e1a0be9c3c64919c0bdd74273b969a964d3af1a7c63cd6f2c3f6653ac6859b33e287787406ed95b9ce45608a795ab63","ssdeep":"","tlshash":"2241eb17df705b15e00c0174955c4b7e334196e05b1b2b350d055aa5e53d7f3d73ad25","first_seen":"2026-03-15T14:17:01.656026Z","last_seen":"2026-03-15T14:17:01.656026Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":37,"dns":10,"connect":22,"send":0,"wait":43,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/2588/thumb-5c793e9308c2b.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/2588/thumb-5c793e9308c2b.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1306\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: EXPIRED\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1306,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"892d251de34af88482262e8905c3cf50","sha1":"3ecc2427e83ca7cdbe35bef2afbe443344f3424d","sha256":"66dddc67f0281461db3a831bdefaf7d7570ff39bd71143a3ec2d6b9124293fd2","sha512":"aaf5cd7bfafccf3c921ca09d86dc6c38d61e41d8cd75f34d3cd7642da267fa938772aec5a18e8aa19bbc69d0a8283b627a7d9e5e76cf8a86e707d1d2208ea6a5","ssdeep":"","tlshash":"fe21b7183a602e2fec0d137e9c9c3a017bb0a301e163bfa599467a55de24377c976d34","first_seen":"2026-03-15T14:17:01.657982Z","last_seen":"2026-03-15T14:17:01.657982Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/modern.support.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/modern.support.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 17:21:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a08106-b1cc1\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":728257,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65464)","md5":"3369671a0c04194e159ee3b4e9083e15","sha1":"a0c68f68463a1f86b014980518c93b0d32407899","sha256":"3c8010aba806ccddf2baebade3b948270c8764070a1f803c11fea723d6e773d6","sha512":"44d253d9501c11dcbe436f8d97080ffc474eeeb67ebc1bd23021e23c925df253e8aaa5091ab8605a3f4cebcd851dfeb8696663b719d246530b28fc2acb2b62ad","ssdeep":"6144:1nynt0UCLf3SW99XC+q5osQeJ0OWpS7LXpegV1y2izjfUPNHbYJQAmQ/uQ8OcRRh:cOOWpcD3PNBF9kbV4BimHY+rOi","tlshash":"def44c9672c2742313af05b7d06b2118f73e159929090c78f328bae63e55eca9176f7c","first_seen":"2026-02-03T09:11:57.459525Z","last_seen":"2026-03-15T14:18:05.511923Z","times_seen":54,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-15","alert":"Hunting_JS_WebAssembly","trigger":"case-battle.net.ru/index_files/modern.support.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/img/svg/coinflip.svg","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /img/svg/coinflip.svg HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 17:20:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ee-3900\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14592,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6fb6d28851795c5e72759f13f79673b7","sha1":"ef606112c2f9c47b47ea2d39f34702ee968dd567","sha256":"b227530d34f7dba664801377020aecd8e88137db73989bebd0bf6ea1afd22e49","sha512":"c878f6f6286c5bcec0db273af95345220fc1df4e7c234ed1dbf55b63b04a4f3fb54aa518babdadcfad503b21492c733afc122f892b0d9d8e1b5e42e24a8801d1","ssdeep":"384:ubkp7TRYPSZUpPGaMqYYuka2g8BoTh4kQlb:usdwSZAsqY97CGF4H","tlshash":"8d62717213a4d7fda6c18b088974204b37b5948a76f4e1ecfb2ba686af064f34034d75","first_seen":"2024-12-02T21:43:54.586815Z","last_seen":"2026-06-15T03:06:03.079344Z","times_seen":54,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/2821/thumb-6960fbd2789cf.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:27.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/2821/thumb-6960fbd2789cf.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:27 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1798\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: EXPIRED\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1798,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"68b4ee8b7136932c52234a3c76a84004","sha1":"8a8271fe62713c7855394b709beb1ff0fec7d046","sha256":"f1de1317cc17965f88c9158ad1cd0921b696a6143f1388d711ad8e33af824356","sha512":"5e5aac34667fdb3ce5edd3d34f15d896cf5cdc03cd2a6e1cda34e689da83f8c38f45a6a8f6ba65474509d49fbbfed7bd9f13a4de9aafe29ed70806e88ae71e9c","ssdeep":"","tlshash":"1631f809a3e09846dd2c533908241553b3609a5c945bb3bb78dd3530e4bdbf7ec538a4","first_seen":"2026-03-15T14:17:01.662592Z","last_seen":"2026-03-15T14:18:05.480466Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/1266/thumb-5c793d04bf128.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:29.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/1266/thumb-5c793d04bf128.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:29 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1155\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1155,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0d28c4e4c3e0b6136892437f8074de9c","sha1":"06139e0825d43d0efd79f3f203933054d418e788","sha256":"f9883bcfac3219ca180324605e791ce1501b80d61ff82e34a4aa2cfbda4658ea","sha512":"d30d360eb298d69e311f49d7b5753349b38d8993a79f40fd0b0ba6afb94afe40b343237550c81eafe621fd8c1030d159f606093c31074a8878d53a9249dc7516","ssdeep":"","tlshash":"8d21b5699be06d51c578037b0c8c47357391a6a856231be7ffc13078592c3a5eb31d26","first_seen":"2026-03-15T14:17:01.664373Z","last_seen":"2026-03-15T14:17:01.664373Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/api-3987d970.js","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/api-3987d970.js HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/index_files/funds-form.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Feb 2026 17:20:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a080ee-8bfb\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35835,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35834)","md5":"4f9587d0de4ceae9ed2caf4085f8dabd","sha1":"d8282229105c40b1e8374fa92aa03d023c36087c","sha256":"8e9f54db2cf4a3cfb9155d8463e9b99d78f41410655207d391c85d3deb4372a1","sha512":"14477af3749a8c9cf495bc4d5e7ce2e1a891a81b5ea32684bec6bc0878353d4be4119374592999119fb4e4186cb02390ae41567c83d222168090b9eaa1f3b978","ssdeep":"768:nJ8mAkFPst7ELPiUgU9QDl9uHltj6LKQcSluawKMni/zFu51yqOiFyQ+Ax3xE/bo:kLKPqxduF3/Yxjteh1jP9","tlshash":"78f219d576d1b06153aa64f680ef0506f339961d740d84e0f128acdb2cb510e9bbbf79","first_seen":"2026-03-15T14:17:01.666159Z","last_seen":"2026-03-28T19:42:48.60126Z","times_seen":3,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/454/thumb-5c793b9705c28.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/454/thumb-5c793b9705c28.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1273\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1273,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"a1481918f6827cae082b23161122161e","sha1":"22f02795a8f14d90175df302ce2275739d5cb59a","sha256":"bd8e9768703fb01220a30b7879224a38ccc87aa1cad925b31f24eaea8ab731fb","sha512":"4fa39096c3109e3cf760488ff1aa7122a6a82560176f973ecac06849fd46fb8ba51369cd35d338ef3e7df16028d83b51e806b7e2b9b863adcaba9ba6f5836d74","ssdeep":"","tlshash":"3121a7145b208e24e2e40b3588fc9703b7e1b36d625b1fca5d8137489d58bb3ec79d24","first_seen":"2026-03-15T14:17:01.668033Z","last_seen":"2026-03-15T14:17:01.668033Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gamecontent.io/images/skin/15173/thumb-615427528c5a0.png","fqdn":"cdn.gamecontent.io","domain":"gamecontent.io","tld":"io"},"ip":{"addr":"45.120.177.250","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamecontent.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 06:26:09 GMT","end":"Sun, 24 May 2026 06:26:08 GMT"},"fingerprint":{"sha1":"96:7C:60:21:8B:A4:E4:EC:98:21:20:3B:F9:10:BE:7E:8F:C1:9E:C5","sha256":"14:79:A4:AF:90:E6:2A:D3:3D:7B:7F:B8:C4:ED:19:E6:E6:5A:DD:8A:54:3B:12:04:5C:BA:56:A7:E8:03:51:AD"}}},"request":{"raw":"GET /images/skin/15173/thumb-615427528c5a0.png HTTP/1.1\r\nHost: cdn.gamecontent.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1948\r\nx-image-format: avif-converted\r\ncache-control: public, max-age=2592000, immutable\r\nvary: Accept\r\nx-cache-status: HIT\r\nx-variant: avif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1948,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"256433c1a24092aadeb46171582e2f62","sha1":"f80197635f3759f52926ad3a359c20da63a6d78d","sha256":"e9b8041f07852b1347568972cc4705e2b1bbff59b0a178d685668f68c3ac2ab7","sha512":"8e19aa8b426586f9253392ed84946a044657c09af34c6fd1cacb2609a3b09b1c4fd80c7b8daa6d8db94385542f1bf3b8d20dad927570b5afc2a47601ce2a280e","ssdeep":"","tlshash":"a241f96411d00962c0ac02bd047cd7177b31d52772a56d29e9d6f9125ef5b33dcb6836","first_seen":"2026-03-15T14:17:01.669678Z","last_seen":"2026-03-15T14:18:05.510134Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.net.ru/index_files/corner-left.png","fqdn":"case-battle.net.ru","domain":"case-battle.net.ru","tld":"net.ru"},"ip":{"addr":"31.31.196.101","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.net.ru/","date":"2026-03-15T14:16:26.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.net.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 16:26:03 GMT","end":"Wed, 27 May 2026 16:26:02 GMT"},"fingerprint":{"sha1":"39:F8:5B:6E:A7:0F:62:4E:86:68:0B:07:EB:1A:AB:9E:DE:D2:F9:D7","sha256":"A0:5C:BD:CD:86:7E:24:30:B8:A5:BA:84:C4:9B:24:73:D8:24:A5:04:8B:BA:89:DE:7B:70:9C:10:97:C8:D9:AE"}}},"request":{"raw":"GET /index_files/corner-left.png HTTP/1.1\r\nHost: case-battle.net.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.net.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 15 Mar 2026 14:16:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 4547\r\nlast-modified: Thu, 26 Feb 2026 17:20:46 GMT\r\netag: \"69a080ee-11c3\"\r\nexpires: Wed, 29 Apr 2026 14:16:26 GMT\r\ncache-control: max-age=3888000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4547,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 101, 8-bit/color RGBA, non-interlaced","md5":"d59f2a9cc223227e8291e89fbc263edb","sha1":"2314228fa010608ab847ef430c2717aefefbc24f","sha256":"04bde4a26d09b583422bff18e1886ae8fa919eb2d1250cff0947cb6c9b2e3cec","sha512":"18c098de05f044d018630c3263e7e452d0bc58aab0ab0a14bc358ce9117d1acace9d2b988748437538b1ed852df6b58352c207d6c4c6d2228a242a1061505609","ssdeep":"96:eXDsajAAhCA3498sXdD8d0mTf7O3zUcxGqbRplyyz85Arn9:eXD1CmPgYOY2bbf85Arn9","tlshash":"ca916dd565aa9d67b78cf037c0dcf59200c2f666ca9e4bcd5d8092125ae7c0e2caf344","first_seen":"2024-12-02T21:43:54.414189Z","last_seen":"2026-05-03T16:04:13.027884Z","times_seen":41,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"case-battle.net.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}