{"report_id":"3fd4d358-ae15-4c9b-8dee-1d6dcc598772","version":6,"status":"done","tags":[],"date":"2026-04-17T10:18:36Z","url":{"schema":"http","addr":"market.old.com.ru","fqdn":"market.old.com.ru","domain":"old.com.ru","tld":"com.ru"},"ip":{"addr":"89.111.143.197","port":0,"asn":39494,"as":"Jsc ru-center","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"markets-csgo-com.ru/","fqdn":"markets-csgo-com.ru","domain":"markets-csgo-com.ru","tld":"ru"},"title":"CSGO Market - купить скины кс го, продать скины кс го!","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"market.old.com.ru","fqdn":"market.old.com.ru","domain":"old.com.ru","tld":"com.ru"},"ip":{"addr":"89.111.143.197","port":0,"asn":39494,"as":"Jsc ru-center","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-22T10:18:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"markets-csgo-com.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"markets-csgo-com.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"market-old.csgo.com","ip":{"addr":"195.85.59.95","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"domain_registered":"2000-02-07","domain_rank":314762,"first_seen":"2023-03-06T21:51:43Z","last_seen":"2024-10-21T16:49:45.331924Z","alert_count":0,"request_count":7,"received_data":58381,"sent_data":3256,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"market.old.com.ru","ip":{"addr":"89.111.143.197","port":443,"asn":39494,"as":"Jsc ru-center","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":297,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":1,"received_data":8018,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"markets-csgo-com.ru","ip":{"addr":"185.178.208.137","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2026-02-02","domain_rank":0,"first_seen":"2026-03-12T14:54:28.223195Z","last_seen":"2026-03-12T14:54:28.223195Z","alert_count":6,"request_count":3,"received_data":2570682,"sent_data":1585,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2026-04-13T02:34:08.324504Z","alert_count":0,"request_count":1,"received_data":28410,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"market-old.csgo.com/images/warning_trades_sup.png","fqdn":"market-old.csgo.com","domain":"csgo.com","tld":"com"},"ip":{"addr":"195.85.59.95","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://markets-csgo-com.ru/","date":"2026-04-17T10:18:11.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 23:25:06 GMT","end":"Wed, 24 Jun 2026 00:25:04 GMT"},"fingerprint":{"sha1":"2A:91:66:F1:88:F2:A2:DA:A7:CF:D1:9B:E9:0A:A3:B7:76:99:E1:72","sha256":"97:4F:32:1F:25:02:7F:0C:FB:BD:3E:97:7E:04:AA:1C:D0:03:25:1E:E7:BD:9B:A2:DD:F9:D2:69:C5:C0:C6:BE"}}},"request":{"raw":"GET /images/warning_trades_sup.png HTTP/1.1\r\nHost: market-old.csgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://markets-csgo-com.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 10:18:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2450\r\nlast-modified: Sat, 28 Mar 2026 20:04:24 GMT\r\netag: \"69c83448-10fb\"\r\nexpires: Mon, 14 Apr 2036 10:18:11 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 1616974\r\ncf-polished: ok, orig_size=4347\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:85,h2pri\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9edaaf304e45b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2450,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"542fc399982ba45644acac6f7bbd772d","sha1":"ad1e0ed6d101e1717fc381e2045c1052e73be5d3","sha256":"215aace0d7d40a7390c8f1778a888f2268fc2671e8463f92c9675c74d8862995","sha512":"49a31358ce8bca8ce6009202cdd3175568923b932ac058a8e7809032f9602f47425c6323292187173c103de4ed02d98bc8b54251d3e67e8346093de889931711","ssdeep":"","tlshash":"c1513a6ccadfcb804aacf7544359467727a54dc0e6238febc32285a54a868f28dc4dd9","first_seen":"2026-04-17T10:18:42.873638Z","last_seen":"2026-04-17T10:21:43.844807Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-old.csgo.com/images/warning_trades_steam.png","fqdn":"market-old.csgo.com","domain":"csgo.com","tld":"com"},"ip":{"addr":"195.85.59.95","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://markets-csgo-com.ru/","date":"2026-04-17T10:18:11.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 23:25:06 GMT","end":"Wed, 24 Jun 2026 00:25:04 GMT"},"fingerprint":{"sha1":"2A:91:66:F1:88:F2:A2:DA:A7:CF:D1:9B:E9:0A:A3:B7:76:99:E1:72","sha256":"97:4F:32:1F:25:02:7F:0C:FB:BD:3E:97:7E:04:AA:1C:D0:03:25:1E:E7:BD:9B:A2:DD:F9:D2:69:C5:C0:C6:BE"}}},"request":{"raw":"GET /images/warning_trades_steam.png HTTP/1.1\r\nHost: market-old.csgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://markets-csgo-com.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 10:18:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2796\r\nlast-modified: Thu, 02 Apr 2026 18:48:29 GMT\r\netag: \"69ceb9fd-1545\"\r\nexpires: Mon, 14 Apr 2036 10:18:11 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 1034040\r\ncf-bgj: h2pri,imgq:85\r\ncf-polished: ok, orig_size=5445\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9edaaf304e40b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2796,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"56f298fda60846b2e9e0b064123e018e","sha1":"2097fce2e7a24cefa1709b2ac8821c32871e791a","sha256":"500273fae6f99705bfe68563f988bfbf09fd75c7a622b19aac5a6390d10b5cde","sha512":"274ecf3870d6178ad0edf5568313a4f4e6e85509344f323658adfd9f39535b6c6b2225b712ca30351ca09ca184a5eb02b574cd8a84653d291ff9f46c1abac24e","ssdeep":"","tlshash":"b5514cf8477ab963ec33747d59293f163250bd13641a50e7255562a22af5f34990c063","first_seen":"2026-04-17T10:18:42.876851Z","last_seen":"2026-04-17T10:21:43.843422Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-old.csgo.com/images/x2sihru.png","fqdn":"market-old.csgo.com","domain":"csgo.com","tld":"com"},"ip":{"addr":"195.85.59.95","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://markets-csgo-com.ru/","date":"2026-04-17T10:18:11.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 23:25:06 GMT","end":"Wed, 24 Jun 2026 00:25:04 GMT"},"fingerprint":{"sha1":"2A:91:66:F1:88:F2:A2:DA:A7:CF:D1:9B:E9:0A:A3:B7:76:99:E1:72","sha256":"97:4F:32:1F:25:02:7F:0C:FB:BD:3E:97:7E:04:AA:1C:D0:03:25:1E:E7:BD:9B:A2:DD:F9:D2:69:C5:C0:C6:BE"}}},"request":{"raw":"GET /images/x2sihru.png HTTP/1.1\r\nHost: market-old.csgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://markets-csgo-com.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 10:18:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21260\r\nlast-modified: Thu, 16 Apr 2026 17:28:39 GMT\r\netag: \"69e11c47-2573e\"\r\nexpires: Mon, 14 Apr 2036 10:18:11 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: ok, orig_size=153406\r\npriority: u=4;i=?0,cf-chb=(58;u=5;i)\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9edaaf304e3ab4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d44b48e66608d45cfc00c11dfa5759d9","sha1":"12a2096528f240e34a30cc95909527266911a00e","sha256":"c52804d2373cb86fff2d73df80b86f6f00002e0e580c2156726535387628592c","sha512":"de2c468fafd3a8d7378df60b68baee7fe957636647956d6e4dce6ef73f90bf233348a7671b4239692b461097cfdb0e464b954ff25570ae645b987a8998a13b66","ssdeep":"384:VWK6PNjSJ9hKB7tKWOAeSg7ex5JM1Cv80r5dbWKiaR99OqQYsut7w5R:wATEBhLeSy/1Cv39ia5OQ7c","tlshash":"6ea2e0a7b489b16c387aab382b061b96d08bef71d190dd9ce937c47d181216874c2ecd","first_seen":"2026-04-17T10:18:42.879381Z","last_seen":"2026-04-17T10:21:43.840499Z","times_seen":2,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":34,"dns":0,"connect":1,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market.old.com.ru/","fqdn":"market.old.com.ru","domain":"old.com.ru","tld":"com.ru"},"ip":{"addr":"89.111.143.197","port":443,"asn":39494,"as":"Jsc ru-center","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-17T10:18:10.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market.old.com.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 22:33:08 GMT","end":"Thu, 11 Jun 2026 22:33:07 GMT"},"fingerprint":{"sha1":"AC:90:92:E1:C4:A8:19:05:C5:88:BA:CB:1E:7F:09:95:20:C3:62:D6","sha256":"58:8B:9E:27:C0:1C:72:2D:A0:A3:7C:B8:F7:13:E2:00:C5:D8:A5:69:C6:EB:71:28:6A:43:C8:F6:61:63:81:58"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: market.old.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Fri, 17 Apr 2026 10:18:10 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: live_129025=1; path=/\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with no line terminators","md5":"eb1b009206bd9f3781d55c29939340bc","sha1":"7b04babad21b5dd5cc3280b13488dc6a8efd608c","sha256":"13cb0d2f8fa4dbc5396685527ae9209aa1eddfd7dc6d4a1377b60e10b3a58a76","sha512":"d8dfba99c4c6c460b42f544fd6327382cb9895a720ac9dd268ddb4fbeaec0216768a7dbe4340c5fbb5004dc4fd06a4a8115ab0ef1c0a0be4a9252e8077111a17","ssdeep":"","tlshash":"d5a002e70c11955827b6835a8d32f70e995362da68a0d443a5c10d3835873da8a1ee89","first_seen":"2026-04-17T10:18:42.882133Z","last_seen":"2026-04-17T10:21:43.842407Z","times_seen":2,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":157,"dns":84,"connect":33,"send":0,"wait":38,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Condensed:400,700,300\u0026amp;subset=cyrillic,latin","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://markets-csgo-com.ru/","date":"2026-04-17T10:18:11.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css?family=Roboto+Condensed:400,700,300\u0026amp;subset=cyrillic,latin HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://markets-csgo-com.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Apr 2026 10:18:11 GMT\r\ndate: Fri, 17 Apr 2026 10:18:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7332,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"99a458060330c1a0f7da01f99f4fbfb9","sha1":"9cce63e1e367cf2bba8a731a1e0e8c5fb67a411d","sha256":"6cf525af3a9eab0e833f5f5f30fed6484bfb2a29f4951286c10b3994fee94dd1","sha512":"e704fe4a8f1ace32983d4ba2110eea19abc40d5d58c82ed928c4bee1d335c49b891f5f18aa690cb8df8ee7a2cb14ffc8116f7c271fdaeea3a3fcf7127d9e479a","ssdeep":"192:iNm1ASNm17SNm1KNm143pNm19Nm1N0Nm1ONm1A/Nm17/Nm13Nm143ANm1cNm1N12:4meIm9ImKmQvmFmKmimeVm9VmzmQum4J","tlshash":"b8e16b91442aa804e7935cc627cf3d31dd4e62157048c5a6dbfd1ca8acf3e26235878f","first_seen":"2025-09-13T02:01:01.557898Z","last_seen":"2026-04-22T05:31:00.738872Z","times_seen":1697,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":149,"dns":3,"connect":20,"send":0,"wait":35,"receive":0,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-old.csgo.com/images/banners/0a3cc352e6aceb1d1ed0b7adc3e413b4.png","fqdn":"market-old.csgo.com","domain":"csgo.com","tld":"com"},"ip":{"addr":"195.85.59.95","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://markets-csgo-com.ru/","date":"2026-04-17T10:18:11.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 23:25:06 GMT","end":"Wed, 24 Jun 2026 00:25:04 GMT"},"fingerprint":{"sha1":"2A:91:66:F1:88:F2:A2:DA:A7:CF:D1:9B:E9:0A:A3:B7:76:99:E1:72","sha256":"97:4F:32:1F:25:02:7F:0C:FB:BD:3E:97:7E:04:AA:1C:D0:03:25:1E:E7:BD:9B:A2:DD:F9:D2:69:C5:C0:C6:BE"}}},"request":{"raw":"GET /images/banners/0a3cc352e6aceb1d1ed0b7adc3e413b4.png HTTP/1.1\r\nHost: market-old.csgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://markets-csgo-com.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 10:18:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25116\r\nlast-modified: Thu, 16 Apr 2026 17:28:39 GMT\r\netag: \"69e11c47-25230\"\r\nexpires: Mon, 14 Apr 2036 10:18:11 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\npriority: u=4;i=?0,cf-chb=(74;u=5;i)\r\ncf-polished: ok, orig_size=152112\r\ncf-bgj: imgq:85,h2pri\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9edaaf304e47b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25116,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"608aab24ef9920dc317723987a259a28","sha1":"5c6861480fef87e9bc875ffa3715d77b99d8a3fc","sha256":"ec5e80f938b09d6f1d9128231e1b80ac8048a083d33c44ae20e09ed14d96e127","sha512":"8ea6c8d4e6e88136fe1db1fd200884ebe83d674dc59f2aa2db0ab13939e771839c7408a9969f7cb1687c940192605b08a073dca7624f17420c10991cd4ee488c","ssdeep":"384:GOdZCljn19KqhXuMywRzZvm3B7aV+NDtepHpZnz9jg3b5fn1ruRosqqGDAxXwO:nZmSqBywRzZvAVtiH7pst1re5tXAO","tlshash":"81b2f188e48e3ee632f70ded11afe1044924012d1766b6804b6130b9b9ff069db9dcd5","first_seen":"2026-04-17T10:18:42.88643Z","last_seen":"2026-04-17T10:21:43.845998Z","times_seen":2,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-old.csgo.com/images/common/steam_notaffiliated.png","fqdn":"market-old.csgo.com","domain":"csgo.com","tld":"com"},"ip":{"addr":"195.85.59.95","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://markets-csgo-com.ru/","date":"2026-04-17T10:18:11.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 23:25:06 GMT","end":"Wed, 24 Jun 2026 00:25:04 GMT"},"fingerprint":{"sha1":"2A:91:66:F1:88:F2:A2:DA:A7:CF:D1:9B:E9:0A:A3:B7:76:99:E1:72","sha256":"97:4F:32:1F:25:02:7F:0C:FB:BD:3E:97:7E:04:AA:1C:D0:03:25:1E:E7:BD:9B:A2:DD:F9:D2:69:C5:C0:C6:BE"}}},"request":{"raw":"GET /images/common/steam_notaffiliated.png HTTP/1.1\r\nHost: market-old.csgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://markets-csgo-com.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 10:18:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1922\r\nlast-modified: Thu, 09 Apr 2026 12:01:02 GMT\r\netag: \"69d794fe-1539\"\r\nexpires: Mon, 14 Apr 2036 10:18:11 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 630642\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: ok, orig_size=5433\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9edaaf304e49b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1922,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"91a4d7c13ef8d563886afbd27d6d01cf","sha1":"38cc07c60eb99fcce8f4126d51983dd2708ffdc7","sha256":"9bfdb62ac228144bca06ffe2e55e939e42ff8c86efeffa76d00791daa5b2de0d","sha512":"f081037128184eb66462765afcddd9781b959f2d9f66eeadebb30acf7556880ee8f4e4aa4a96c8249cdff6fd2bf0c8694667d6e620acd60c4a584bf7e55d6b00","ssdeep":"","tlshash":"f0413b13c9788d2b5fec7639e464d0aef31668ca9c190d5e20ac311378ce3c16e59d4b","first_seen":"2026-04-17T10:18:42.889208Z","last_seen":"2026-04-17T10:21:43.829237Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-old.csgo.com/images/common/v_blue_on_white_ru.png","fqdn":"market-old.csgo.com","domain":"csgo.com","tld":"com"},"ip":{"addr":"195.85.59.95","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://markets-csgo-com.ru/","date":"2026-04-17T10:18:11.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 23:25:06 GMT","end":"Wed, 24 Jun 2026 00:25:04 GMT"},"fingerprint":{"sha1":"2A:91:66:F1:88:F2:A2:DA:A7:CF:D1:9B:E9:0A:A3:B7:76:99:E1:72","sha256":"97:4F:32:1F:25:02:7F:0C:FB:BD:3E:97:7E:04:AA:1C:D0:03:25:1E:E7:BD:9B:A2:DD:F9:D2:69:C5:C0:C6:BE"}}},"request":{"raw":"GET /images/common/v_blue_on_white_ru.png HTTP/1.1\r\nHost: market-old.csgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://markets-csgo-com.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 10:18:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 716\r\nvary: accept-encoding\r\nlast-modified: Thu, 16 Apr 2026 17:28:39 GMT\r\netag: \"69e11c47-325\"\r\nexpires: Mon, 14 Apr 2036 10:18:11 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: webp_bigger\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 150;u=4;i=?0)\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9edaaf304e42b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":716,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 31, 8-bit colormap, non-interlaced","md5":"69357fd6852206f5eb3b645fcfda75a7","sha1":"c4e1111a8c1f3873d573f7e1dfc5a50f4db42663","sha256":"bc3a757a28b2279e796781a2b27dd40bef005ee275b12da59128e1a47c198697","sha512":"929474cef7181a2aed52b395448e394c78a5d526d9f82d80c1d04daa293b365c2e8111f049c1c77b509fcc9bc9a6cf91b407b797b8681b1404b10d339b6e144b","ssdeep":"","tlshash":"64019472b7b31c94f4dc473ba939834d35fee907c02974a31b31c661cc7408ad000210","first_seen":"2026-04-17T10:18:42.891759Z","last_seen":"2026-04-17T10:21:43.841514Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-old.csgo.com/images/favicon_csgo.png","fqdn":"market-old.csgo.com","domain":"csgo.com","tld":"com"},"ip":{"addr":"195.85.59.95","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://markets-csgo-com.ru/","date":"2026-04-17T10:18:12.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 23:25:06 GMT","end":"Wed, 24 Jun 2026 00:25:04 GMT"},"fingerprint":{"sha1":"2A:91:66:F1:88:F2:A2:DA:A7:CF:D1:9B:E9:0A:A3:B7:76:99:E1:72","sha256":"97:4F:32:1F:25:02:7F:0C:FB:BD:3E:97:7E:04:AA:1C:D0:03:25:1E:E7:BD:9B:A2:DD:F9:D2:69:C5:C0:C6:BE"}}},"request":{"raw":"GET /images/favicon_csgo.png HTTP/1.1\r\nHost: market-old.csgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://markets-csgo-com.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 10:18:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 412\r\nlast-modified: Fri, 13 Mar 2026 16:00:51 GMT\r\netag: \"69b434b3-f7d\"\r\nexpires: Mon, 14 Apr 2036 10:18:12 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-bgj: imgq:85,h2pri\r\npriority: u=4,i=?0\r\ncf-polished: ok, orig_size=3965\r\nvary: accept, accept-encoding\r\nage: 2689974\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9edaaf354fc11525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":412,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1c2f4903b6a4821b7f8af4b69b76ef87","sha1":"e607c35f52ac6ee25365bb71aeed4b10f803f6c4","sha256":"1a1f5d0cb08e919270f3709c1c2b3b953e98c13022336b74f062aadb09f5fb1a","sha512":"232259f7a75f1056aef0929efba663d48836c5363f5b761e622a19d649e2e9ad577fb45a23ee9704579fee166d70fc7d763ccfb102dcfd14eac122eadc006460","ssdeep":"","tlshash":"a8e08af458057fc0cc8d4ec15f6c0c49384103e242e45cd482c7466fe5302d01883f0c","first_seen":"2026-04-17T10:18:42.894209Z","last_seen":"2026-04-17T10:21:43.831865Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"markets-csgo-com.ru/","fqdn":"markets-csgo-com.ru","domain":"markets-csgo-com.ru","tld":"ru"},"ip":{"addr":"185.178.208.137","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-17T10:18:11.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"markets-csgo-com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 12:12:08 GMT","end":"Mon, 04 May 2026 12:12:07 GMT"},"fingerprint":{"sha1":"CB:A8:A6:9B:52:5A:F3:96:FE:4B:53:21:2E:79:C0:50:E6:42:4D:4A","sha256":"70:45:6B:41:73:90:3D:1F:DF:C3:F8:F6:BA:68:99:EB:CA:97:82:E8:F8:59:5A:7F:66:22:83:67:52:BF:B0:AD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: markets-csgo-com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market.old.com.ru/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=RKOt6i0zNso47PSK; Domain=.markets-csgo-com.ru; Path=/; Expires=Fri, 17-Apr-2026 10:38:11 GMT\n__ddg10_=1776421091; Domain=.markets-csgo-com.ru; Path=/; Expires=Fri, 17-Apr-2026 10:38:11 GMT\n__ddg9_=91.90.42.154; Domain=.markets-csgo-com.ru; Path=/; Expires=Fri, 17-Apr-2026 10:38:11 GMT\n__ddg1_=1y8cwrR0jUSQseS4EH8F; Domain=.markets-csgo-com.ru; HttpOnly; Path=/; Expires=Sat, 17-Apr-2027 10:18:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 17 Apr 2026 10:18:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2039678,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31165), with CRLF line terminators","md5":"19524d755ea85522dd0365445deb7532","sha1":"d9eb8cff2fd37b044f788d415787b08cddcbde3a","sha256":"e0f4a135e7fb10f6da310541d9b160044efd5c7f265767436d97a816381f2615","sha512":"031e939770bc2ac2fc45f23eb85588ebce987ab4719b0321a7de0b4dc9348995cb8d24c8f105ae7af9562cc3b4b81c0ea3a5ba1f12b8e9f27d9a2d46847deba5","ssdeep":"12288:E8FvHeEkw/082EDNKphv5ZjiaYUu+hr0oJfIre:EMHenw/mp5bjiajuer0l6","tlshash":"ab252a656645318df727c6aaf5a37b5da2359243d50109fcf0af3cac8bca9840073f9a","first_seen":"2026-04-17T10:18:42.896616Z","last_seen":"2026-04-17T10:21:43.834157Z","times_seen":2,"resource_available":true,"data":null}},"time_used":646,"timings":{"blocked":232,"dns":71,"connect":50,"send":0,"wait":178,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"markets-csgo-com.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"markets-csgo-com.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://markets-csgo-com.ru/","date":"2026-04-17T10:18:11.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:27:05 GMT","end":"Wed, 03 Jun 2026 06:27:01 GMT"},"fingerprint":{"sha1":"04:A8:A2:DB:A5:D9:6E:A1:96:19:8E:E4:20:63:9D:DD:4B:05:E5:4A","sha256":"86:F0:31:59:6F:27:50:6B:1C:65:39:9A:BF:6D:0C:A8:82:D5:B2:A6:36:4B:9C:0A:EB:05:EE:13:0F:EE:25:EC"}}},"request":{"raw":"GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://markets-csgo-com.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 10:18:11 GMT\r\ncontent-type: text/css; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"4fbd15cb6047af93373f4f895639c8bf\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:54 GMT\r\ncdn-cachedat: 12/09/2024 23:20:39\r\ncdn-proxyver: 1.06\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1075\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 4f338739bd75b634e7f3517bf2e1f433\r\ncdn-cache: HIT\r\nserver: cloudflare\r\nage: 2433577\r\ncf-cache-status: HIT\r\ncf-ray: 9edaaf2f8c84568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27466,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (27303)","md5":"4fbd15cb6047af93373f4f895639c8bf","sha1":"12d6861075de8e293265ff6ff03b1f3adcb44c76","sha256":"ddd92f10ad162c7449eff0acaf40598c05b1111739587edb75e5326b6697c5d5","sha512":"f8be32cba15170319b5c9f663c6f0c4ffdd4083cf047d80f7b214d302b489eca25fbee66ddb9366d758a7598efc9b9a886b02c9f751ae71f207cb9db1356243a","ssdeep":"384:Qi5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8c:Dlr+Klk3YlKfwYUf8l8yQ/T","tlshash":"3bc230f8e54c01d66731c48bff81b36862b6f73dd5814d99f01f690c29d22a522c5bba","first_seen":"2023-04-05T07:46:17Z","last_seen":"2026-04-22T08:05:43.777625Z","times_seen":36413,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":29,"dns":1,"connect":1,"send":0,"wait":5,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"markets-csgo-com.ru/4f4d39c.js","fqdn":"markets-csgo-com.ru","domain":"markets-csgo-com.ru","tld":"ru"},"ip":{"addr":"185.178.208.137","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://markets-csgo-com.ru/","date":"2026-04-17T10:18:11.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"markets-csgo-com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 12:12:08 GMT","end":"Mon, 04 May 2026 12:12:07 GMT"},"fingerprint":{"sha1":"CB:A8:A6:9B:52:5A:F3:96:FE:4B:53:21:2E:79:C0:50:E6:42:4D:4A","sha256":"70:45:6B:41:73:90:3D:1F:DF:C3:F8:F6:BA:68:99:EB:CA:97:82:E8:F8:59:5A:7F:66:22:83:67:52:BF:B0:AD"}}},"request":{"raw":"GET /4f4d39c.js HTTP/1.1\r\nHost: markets-csgo-com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://markets-csgo-com.ru/\r\nCookie: __ddg8_=RKOt6i0zNso47PSK; __ddg10_=1776421091; __ddg9_=91.90.42.154; __ddg1_=1y8cwrR0jUSQseS4EH8F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=wsyhGanQFq9zEoL1; Domain=.markets-csgo-com.ru; Path=/; Expires=Fri, 17-Apr-2026 10:38:11 GMT\n__ddg10_=1776421091; Domain=.markets-csgo-com.ru; Path=/; Expires=Fri, 17-Apr-2026 10:38:11 GMT\n__ddg9_=91.90.42.154; Domain=.markets-csgo-com.ru; Path=/; Expires=Fri, 17-Apr-2026 10:38:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 17 Apr 2026 10:18:11 GMT\r\ncontent-type: text/javascript\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":341392,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"deee2a358cc4e0198555dba4179a1a48","sha1":"1e270be901ff92fc12e61e9aba50babbf61157ba","sha256":"a1b2272ccf745967b0d532b2af5a48ec4efdee4fbb3f8f57268da3e933e16eb4","sha512":"06864364f685eddbdbbcfe47abb7e66a9f5a0491a98842cd1574f3ce2a8914cb26271ead40e6ea150fcd87e8254679d4d7933c8dbe345897c1b0070699fcbcfd","ssdeep":"3072:XHNwcv9VBQpLl88SMBQ47GKoDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB5:XHWK9VC78UBQ47GKMNdIVWjNS9cdzAV","tlshash":"7474188e7241353256eba1a5103b2a0bb237554da909805cb03ccddeae7ce4971bbf7d","first_seen":"2023-10-15T23:19:21Z","last_seen":"2026-04-18T14:18:38.733535Z","times_seen":126,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"markets-csgo-com.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"markets-csgo-com.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"markets-csgo-com.ru/02b7754.js","fqdn":"markets-csgo-com.ru","domain":"markets-csgo-com.ru","tld":"ru"},"ip":{"addr":"185.178.208.137","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://markets-csgo-com.ru/","date":"2026-04-17T10:18:11.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"markets-csgo-com.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 12:12:08 GMT","end":"Mon, 04 May 2026 12:12:07 GMT"},"fingerprint":{"sha1":"CB:A8:A6:9B:52:5A:F3:96:FE:4B:53:21:2E:79:C0:50:E6:42:4D:4A","sha256":"70:45:6B:41:73:90:3D:1F:DF:C3:F8:F6:BA:68:99:EB:CA:97:82:E8:F8:59:5A:7F:66:22:83:67:52:BF:B0:AD"}}},"request":{"raw":"GET /02b7754.js HTTP/1.1\r\nHost: markets-csgo-com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://markets-csgo-com.ru/\r\nCookie: __ddg8_=RKOt6i0zNso47PSK; __ddg10_=1776421091; __ddg9_=91.90.42.154; __ddg1_=1y8cwrR0jUSQseS4EH8F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=JJbkwnplmU9l7W6N; Domain=.markets-csgo-com.ru; Path=/; Expires=Fri, 17-Apr-2026 10:38:11 GMT\n__ddg10_=1776421091; Domain=.markets-csgo-com.ru; Path=/; Expires=Fri, 17-Apr-2026 10:38:11 GMT\n__ddg9_=91.90.42.154; Domain=.markets-csgo-com.ru; Path=/; Expires=Fri, 17-Apr-2026 10:38:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 17 Apr 2026 10:18:11 GMT\r\ncontent-type: text/javascript\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":187959,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8a23ea42530e55c06b46f25eb0f0e42a","sha1":"d258ed3fd363f06bffc2efff3d61d92496a40745","sha256":"1e5af8d92f377324040766c8338904c473425cb03808a6ad6bb0ea8a9b49ae21","sha512":"f9bd4d8ec9d5d0e88baecf332bb0c4e76ec67cbabe12b6def8df9690442e747499722d75c12097fd3905ea307b34b582615e356e749cc4824915ddb10b04499d","ssdeep":"3072:bMkrRWnA10I4sAhwB7IkCPkzd6Hh3rDhOaEeLanV4OvpE:5HAhqokebLOv2","tlshash":"51041f60f184ac5d513bbb17deff5252fde42b8c1745888aa420ec90bdf65f6ba1e804","first_seen":"2026-04-17T10:18:42.901734Z","last_seen":"2026-04-17T10:21:43.839615Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"markets-csgo-com.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"markets-csgo-com.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}