{"report_id":"429b3569-bb93-45e3-b33d-b5fc0252a3a3","version":6,"status":"done","tags":[],"date":"2026-04-15T14:59:08Z","url":{"schema":"http","addr":"csgorun.live","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"csgorun.live/","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"title":"CSGORUN skins and CS 2 items (CS:GO), betting on matches, selling and replacing skins with new ones on CSGORAN","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"csgorun.live","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T14:59:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-04-08T16:50:56.499582Z","alert_count":0,"request_count":2,"received_data":2570,"sent_data":880,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-12T22:24:43.06808Z","alert_count":0,"request_count":2,"received_data":943208,"sent_data":880,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cloud.this.team","ip":{"addr":"186.2.165.19","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2018-10-24","domain_rank":0,"first_seen":"2022-09-02T10:01:02Z","last_seen":"2026-03-25T06:25:46.547702Z","alert_count":0,"request_count":9,"received_data":789602,"sent_data":4153,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"csgorun.live","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-09-19","domain_rank":0,"first_seen":"2026-04-15T14:59:12.028477Z","last_seen":"2026-04-15T14:59:12.028477Z","alert_count":79,"request_count":79,"received_data":10218530,"sent_data":51135,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"cs2run.app","ip":{"addr":"190.115.31.208","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2023-12-11","domain_rank":834472,"first_seen":"2024-02-09T01:58:44Z","last_seen":"2025-11-23T14:02:04.106521Z","alert_count":0,"request_count":3,"received_data":27672,"sent_data":1412,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"ws.cs2run.app","ip":{"addr":"190.115.31.208","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2023-12-11","domain_rank":0,"first_seen":"2024-12-18T17:09:49.923987Z","last_seen":"2026-04-14T11:17:04.623016Z","alert_count":0,"request_count":1,"received_data":737,"sent_data":569,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"csgorun.live/","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c60ae5283546d5816feabd6141b2e079","sha1":"49704afbcf2b7467d144987b8f3ed69ac324e4fd","sha256":"fc3f3ab9f23977e1676c3949e59feff6fd83b60880e3293cf1dbf8075095ba60","sha512":"f3a0993b89afa772889201f84737e1ad3d051ce4b7ce2bdb2ba59383594ec7ee4dcc8710af7c752377f31d364c93dd9c9c650350a0928edaf1cf399b8f1e1ce9","ssdeep":"","tlshash":"e2b0028c23030c0440a176185f0bba84b5022032d0f0d4653e4861086bf0d17aa45190","size":115,"data":"","first_seen":"2026-04-14T11:17:10.825044Z","last_seen":"2026-04-15T15:01:33.361288Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"48c1c6460a0de23560d3ba389e6d9fb4","sha1":"71d8b19335fded57b59e9e72354f10a0fb1352b4","sha256":"3cecf6ac85f8499d572679c4b84d9660bb389e662e9e932d979b0354dfa0e745","sha512":"f7c75db7e354bc34c92cd64395f282bf09789019641470f6deed79ce1e5a6047a2ae8f6ee1f6327725a8d7214778763ae5386d218b9ca7d06bd8ff9ce9f2cccc","ssdeep":"","tlshash":"1ef02b5779cb0c212d5b917aa77a4a0431d2331f6145d4327cec941a6f0866a4a65eac","size":474,"data":"","first_seen":"2026-04-14T11:17:10.828086Z","last_seen":"2026-04-15T15:01:33.361804Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/pixel.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b42e329b6c2aff44d40ebf22411d397","sha1":"c93b7e83f2a77c71b9d5dc424c4626e7713f550c","sha256":"105a9cc67f620cda48148d494be7065bdca39b10b15e4890183f2040cc6f0869","sha512":"e1a6dd6622b324de377068e4cf1aea34d0564c71f709439bc1935a85b080bd452512b8d65ad69747a0a9828606df2c3847013920dda88332bbece61433d472ea","ssdeep":"","tlshash":"4531c8f1336a90ed81f220e9515f1a1bd1769b45bc188c84a063fa016434e7b0b379a9","size":1618,"data":"","first_seen":"2025-05-31T10:10:21.166016Z","last_seen":"2026-04-15T15:01:33.323951Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2e13d422fb7f2a54b65d36f3ad8b505","sha1":"578d46f0e6a4d0f5e64c53413d458f6f5be2da26","sha256":"a1dedd72b851a0bc9779ec54f1a1b8df65985a6dad1b1c5e0bef33ca2ae1c73f","sha512":"e78721a6aa053f60475a2ecf9a8fa1cf95081036789a16f5ab900294f0d4fedec17a977ec3c1ea817b3890a77bd3b2f000222ba99ed707796f429774ab39945b","ssdeep":"","tlshash":"0df0c0eb2c81863405bc1591a772d75474111c097886b9a1c48d88c57e65fda289e54c","size":525,"data":"","first_seen":"2025-03-05T20:54:25.03709Z","last_seen":"2026-04-15T15:01:33.365116Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb94f5f09c26afb6b763d8b305485beb","sha1":"649c812d3efc35f6e03deeb603ed0b7d829d2172","sha256":"222101fae1da041e589071a641c7e1791b91750e3ffb4ad888313ac41a04ca70","sha512":"5942c53a907bf87299d91be4484d9565c53479757668bbf08662a47a75d708550bb888883c5556bc8a3c05de7382cb572f939a7f3134bfa1d43c89704b631d82","ssdeep":"","tlshash":"9bf0dd0b5da3283427e2507d577fea0862aa74470580d8007decc0997f90e578a3eacc","size":644,"data":"","first_seen":"2026-04-14T11:17:10.831519Z","last_seen":"2026-04-15T15:01:33.362304Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KBTMVREMQ9\u0026cx=c\u0026gtm=4e64d1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f575a6fae0a89c470b7b0d7f960c22e","sha1":"8a6ac6b3ec9bf8c3e921a0328e817bc57c14a0da","sha256":"0f21a35fd0cb16215ee41139d5c5622049c4917424af7977e7309799f6eaded0","sha512":"b1ea14375aa715bafcde11abc1fa8f10d56e42e12cb3bf86760fdfbc9edd32330056ffa67f4c761a5c8d530ef9049de856bcbf0164b1dfa68fdd670ce15dd08b","ssdeep":"6144:Bq8EjcT6hjzg2PPvXozN8ZA5bv59Paz/s3L8YcKwvNyC4pdgXi:d6tzg2voR8eTA7vNywS","tlshash":"b9c4faceb3c674626396f479903f01cb697b25e2b49dc8aab1d9cce02e345464127f78","size":561998,"data":"","first_seen":"2026-04-15T14:59:17.729165Z","last_seen":"2026-04-15T15:01:33.318017Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-15T20:37:50.318049Z","times_seen":614224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/assets/index-371a5991.js","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"67d46ef82cfab6c126223e50349b72d8","sha1":"91a5780a41ab5906328c094890ead192ac068c45","sha256":"7cde2266793e8c8dc8ca3407d2740dd721c01e422547a22a0daaecc6f8c4d73d","sha512":"340480566241ce152323a22344ab6cb856b258eca6fa847bc40b07ef58e9203ab5b1e42d240fad5aba3dd8244af55d74cd66a41d0ba0625f8b7cd5876d60a45e","ssdeep":"","tlshash":"431121203459b4dd029a0dd9e07fc145f96074a03876f4e087acdeb8aaa6cc010f9f5e","size":1000,"data":"","first_seen":"2026-04-15T14:59:17.760136Z","last_seen":"2026-04-15T15:01:33.363351Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b9ffc48ca3235e76d42ab16c77df2270","sha1":"61ca2b1772a0f9f20a46f9b6d83c00297379faa7","sha256":"eb1db2599960613ccd99bb18d0f633ca7a0ecde960b6bb740ae1a92890fb6e81","sha512":"274f039dab64587b77ef565e21b9146e2c836c1e25430ab970deb4a8334e8012bd234f999166dbe1ae86e2b329166e062c9856212f2e5d2dc7bb79087ca23e49","ssdeep":"","tlshash":"9501784d1ad3a0202aa3b46f1b9f68057960926f2488ea02bc4c82119f4c92d0936ccc","size":733,"data":"","first_seen":"2026-04-14T11:17:10.833037Z","last_seen":"2026-04-15T15:01:33.36403Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e2a71dea7cdb212aa347c6166d18249","sha1":"de99a8750eded81417c1056c9bfa817059a80355","sha256":"cf0e175ab09532d76afa258aa54651a448d769f370b6e7e69bc13d250a2f17cd","sha512":"f15c79b518082aa4fe7330710cbb8988ccd84b8b9c1237b317ecfaf692713f74db9e2dccb27e184501acbc94e050bbe172ae43952e363377053255c638e0786a","ssdeep":"","tlshash":"f5c02b2801840354409702afa4a103c055b0c8776008483b341f21203fc04d80390ec2","size":133,"data":"","first_seen":"2026-04-14T11:17:10.834625Z","last_seen":"2026-04-15T15:01:33.364492Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KK3SD6T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2012d6bcc5467297608189f7c924b726","sha1":"622158b704bf7d86ab9882bad6b62fc31a68358c","sha256":"4976d6807631478f055268c8f747fe80c3c0f514a173f976070d60858846505e","sha512":"f1d1606a3805fca57421ada2a8cdbfe50b72dd12241cdd74877e0313ed897d655e1276820eedb0e897b82d184f2dfcebc414591e8478f8dfcf3e75acf6d2e8fa","ssdeep":"6144:x5i8EjcGhBAg2PPBN8ZA5Z59Paz/s3LQaWM:x8/Ag2r8eFnJ","tlshash":"378418cdb3da74664393a478903f018ba57a28e2f44cc899f185dcd42e706aa4277f7d","size":379974,"data":"","first_seen":"2026-04-15T14:59:17.744104Z","last_seen":"2026-04-15T15:01:33.351807Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cloud.this.team/rimming/20251122/2603i073357Hi1kUR.webp","fqdn":"cloud.this.team","domain":"this.team","tld":"team"},"ip":{"addr":"186.2.165.19","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.this.team","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 11:32:09 GMT","end":"Wed, 06 May 2026 11:32:08 GMT"},"fingerprint":{"sha1":"1B:9E:C0:F5:46:2A:E5:FD:FF:D7:14:42:7A:A5:06:8D:66:AE:0B:9F","sha256":"D0:4C:ED:F7:DE:C5:A1:3E:0D:A5:4F:8A:74:F3:43:BD:F4:CE:58:86:B5:28:30:30:13:C8:00:A0:82:23:5A:6B"}}},"request":{"raw":"GET /rimming/20251122/2603i073357Hi1kUR.webp HTTP/1.1\r\nHost: cloud.this.team\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=RWZ1NW0p02gwpVDu; Domain=.this.team; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.this.team; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.this.team; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg1_=tmkmhB29GMZJqz0tbyFt; Domain=.this.team; HttpOnly; Path=/; Expires=Thu, 15-Apr-2027 14:58:50 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-length: 84330\r\naccept-ranges: bytes\r\nlast-modified: Sat, 22 Nov 2025 07:33:57 GMT\r\nx-rgw-object-type: Normal\r\nx-amz-request-id: tx000007d581aa5511c2d27-0069216786-1846a8f13-fra1b\r\ncontent-type: image/webp\r\ndate: Wed, 15 Apr 2026 14:36:05 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-do-cdn-uuid: bfde7bd0-6393-426c-9ccd-b2c8865bc9da\r\ncache-control: max-age=3600\r\nddg-cache-status: HIT,HIT\r\nage: 1365\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":84330,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1670x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"733b9c0d0c7e722ca670ad6cb604f045","sha1":"1c6428cd50fffdb456aac7f31d2e1c0dc802fcd5","sha256":"0933706242591b18e760d114a2f4610837586068f3df177268b3c2eef8777238","sha512":"5e023ea115aad7c212fe305c34473129b6c4aabccd081e58ce381f244b766710db52c56140508328293dd8649b90927009cf1b552418e499ed3b29c9e066c8dd","ssdeep":"1536:zpgODAaFugdEpkdiKvFd/umGQQDz4ic293qhWWK3Cx7zLJyQfn0:zpgONugEpklvP/lzQDSDz39yQf0","tlshash":"258312766a99a128b49314ade323b2989356bd501cecf5ec17df8022e3e104377b719f","first_seen":"2026-04-14T11:17:10.742772Z","last_seen":"2026-04-15T15:01:33.31866Z","times_seen":5,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":133,"dns":0,"connect":59,"send":0,"wait":145,"receive":145,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/rollrun-preview.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/rollrun-preview.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/fonts/inter-black-2.woff2","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /fonts/inter-black-2.woff2 HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/assets/index-f4c6c4ff.css\r\nCookie: __ddg8_=LpU0nr9bJTdlI9aS; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=B5CIlE8jqFuddlrz; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:58:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 103832\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 0040cef915792196cd2f10d6d89389bd\r\netag: \"69df9ab6-19598\"\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":103832,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 103832, version 1.0","md5":"edf1baa02cd941c61d54610f955f49c6","sha1":"e40b42fd142c5e04e3babba3def4abc67ff410c4","sha256":"1d1374a7e2f7a6d506cfcfb4b5bf6edc78801d9dbf58ceb7f5a6b54d5cee5ec4","sha512":"c9ef739c69cc32555c229883613e92c49dbde3a9cc3ea666ac3aace8a514a0f729e99474408170129985f197fc44d6cbf4da4a8ef9638ae9437ba082d36718e0","ssdeep":"3072:jw0lHtn0DHEC51BZsLwDllMh8B9ZFDueyU9meT:001SDHEC51ULwDlg8B7FDuZUXT","tlshash":"caa3027afcda1a8cd613997e914ccf4c13223a22497da483ed6e9af34d854178c4e937","first_seen":"2023-07-12T19:36:35Z","last_seen":"2026-04-15T15:01:33.322453Z","times_seen":168,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":341,"dns":0,"connect":0,"send":0,"wait":318,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/flags/pl.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/flags/pl.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=B5CIlE8jqFuddlrz; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Pn1b2qKdJ65WMWHX; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg10_=1776265129; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\r\ndate: Wed, 15 Apr 2026 14:54:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: a414e0db5388f4dff333b37fd66f3fdf\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 191\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-158\"\r\nage: 238\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":344,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b72214b281db2f668e57dd02d484bf03","sha1":"539d45b800184f485843a7ced9c43f259d61301f","sha256":"3cf30337bb0aa59ec73bd3acfaddc3bfaa8f3bb14aedd605521b24653e71b518","sha512":"7eb929ac733017c4b5efb985f548e4c0dd59207ddb17fab302878cfdb5940ad770b0b95e12a8605decbfaeb339b6f230dc44906d67eb8646fd5ce0d30fb769e5","ssdeep":"","tlshash":"7fe0d89e10145709756e47151fad253f307602a120560848e4cb9135e559ac20cd1dd2","first_seen":"2023-05-14T22:37:02Z","last_seen":"2026-04-15T15:01:33.277869Z","times_seen":60,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/fonts/inter-medium-2.woff2","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /fonts/inter-medium-2.woff2 HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/assets/index-f4c6c4ff.css\r\nCookie: __ddg8_=LpU0nr9bJTdlI9aS; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7B3drfLTGo6zu1dR; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:57:09 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 105944\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: bea27b53fca58c42c32c46b14d4cd9f2\r\netag: \"69df9ab6-19dd8\"\r\nage: 99\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105944,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 105944, version 1.0","md5":"943a67750859470af9d9989ae91aef35","sha1":"97e6452fe698bf7cbb9ffc164e967c60cb39c7dd","sha256":"a4ad8ac69b901406c6d29ec3173cbf7b00f4652b997b40033c8c640028a6db1e","sha512":"f6ebe9bba068627ee80763fd2d88778ce513ba144991abbdc8f61789adf04c42a585c17d80b1301e9c0c2546a9b06c4a05c19ee97fe2e956b6907d93fce71e09","ssdeep":"3072:h85XAvGlfCrOJbeGKaQiGZtkvJIZ39xRic:1POJeGKaritkhIl9Dic","tlshash":"32a312d482cae152c6fefcf06a6f0b0711244d8d33356a6b81f15f1958aa5ec0d3abd5","first_seen":"2023-05-21T06:58:03Z","last_seen":"2026-04-15T15:01:33.253975Z","times_seen":748,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":250,"dns":0,"connect":0,"send":0,"wait":53,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/terminal-preview-sm.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/terminal-preview-sm.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/jackrun-preview-sm.avif","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/jackrun-preview-sm.avif HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=mWdwipzqzyUsbjH6; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\r\ndate: Wed, 15 Apr 2026 14:54:51 GMT\r\ncontent-type: image/avif\r\ncontent-length: 25347\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: babf58fe6fe267a1f903d40a67a94f07\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-6303\"\r\nage: 239\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25347,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"a32a6bf315d40d77c1ca6d356d9cbe72","sha1":"70a274d39d32c248e056728d5990d7454a8496b8","sha256":"a6e5ff71efb0155c1cd0bbb5c22857c71ff3d52122b2229053063da44e18148f","sha512":"c566c31c77b91641a9b52fafe5c21bb5a99143aff8dc667f2a67f1203e44a1059f9df3e8504d01ababcecbae85cad31ce372bc64a30e4266dbb473b9a6ffe66b","ssdeep":"384:SXKT72sU0Tv9UbivWzaw6PzozrNp+ZO/GoCY9qsFUHudq+xy4NCMM/ZNx+ipyJHW:ZCsv+bOWD6PzonNAQhjUMsWY7+sMlo","tlshash":"90b2e1c9338e241dc9568db742451c824be3275ec5723c49fb821299fea1f99099bc7e","first_seen":"2023-11-12T19:52:50Z","last_seen":"2026-04-15T15:01:33.353396Z","times_seen":9,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/avatar.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/avatar.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=AgxtqTsz2Y1qtO9b; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=LpU0nr9bJTdlI9aS; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:54:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6310\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: a597b7e7fd17c4e8a9268b037be1f34a\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-18a6\"\r\nage: 238\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":6310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d5d9c3f8ab23671f5a1f22cf67c6da23","sha1":"99e1be324f45c7032757d96230f74bb57c80bee5","sha256":"2ce75c5c83cf64e2812054dffb0d56d6cdebf355cbccba9dbe7a3971fd20c834","sha512":"b1f490ff43c3efe90d8e0bb7f54c3e00dfdf0f1e0816eef4210caaebdd1ae6df97d6b86107d41ff6341fa3ab2cb194f108b3d425e85ff65f863fdaa8ef6f5487","ssdeep":"96:g6flZDTuzr4PF6W95NdP/BN3XEO2dXNsBP1V4mX2iXQW5y2Eq+5UXB5Cx/:5l9m4Pp95NdP/33v2cP1V4mnXoYHyR","tlshash":"4ad19ef23ef929416c148a95ad734032ed46122d97d187ccf41dff515bf64302e1d259","first_seen":"2026-04-14T11:17:10.790692Z","last_seen":"2026-04-15T15:01:33.325428Z","times_seen":5,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/crash-preview-sm.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/crash-preview-sm.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/jackrun-preview.avif","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/jackrun-preview.avif HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=k0C69MaUNkKqspwI; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\r\ndate: Wed, 15 Apr 2026 14:58:35 GMT\r\ncontent-type: image/avif\r\ncontent-length: 37231\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 3cd2e5ee233faf66f146d2077c8f7448\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-916f\"\r\nage: 15\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":37231,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2ed4801f884d610564708540d3ad9299","sha1":"ee75be893c3aeeb1975c3827bd7dff2c52f83428","sha256":"8f356d255db0652264a9e9b54316a9572e915f28e008beb96d7c23b83a620e73","sha512":"a338ea7c6142b1bdb7810caa67921b519a611ca1246db52bd64fe6c9a231dd52eac362ac8543999703424c2e6effb9eb80e7c3e457be7385d4fc15fb135e717b","ssdeep":"768:/d8GG0LQk8iUlMeMuL0E7KbHY8ddUWqdFr81PbZjBAp7KWIBaon2+:60LQDiUlMeHAEObDkdFrIP5B67KtP","tlshash":"e3f2f16966792fd3dc4c497d28517bd58d20d22aad55ef4d90bc2cf8c326adec180723","first_seen":"2025-03-05T20:54:25.029918Z","last_seen":"2026-04-15T20:09:23.911214Z","times_seen":10,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/flags/tr.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/flags/tr.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=B5CIlE8jqFuddlrz; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OH7Q9zHdDLe5wXCW; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg10_=1776265129; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\r\ndate: Wed, 15 Apr 2026 14:54:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 02ecc311694e1a822f260af554b110be\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 754\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-5f3\"\r\nage: 239\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1523,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d0bf34a0fb51822fd388f041ca826151","sha1":"40d6e452a78e3143275039436324df822f685143","sha256":"3de10513113e08d1504f554b8dc635d6ecd818fc10fd0585467a48479891d3bf","sha512":"c3228215c7e0b61acd3d76d855e037366b6defd45017a2bf6f79dbe443b0b0b7d2d056e5757bbd9d6eecb5fe74c7b50d6cc31bc09891b3064dc78ddcf8394e13","ssdeep":"","tlshash":"e5310ecc830f896b74b93938cf752342777811f8a36985b4f169d82a3e9ab641c44de4","first_seen":"2023-05-14T22:36:59Z","last_seen":"2026-04-15T15:01:33.251863Z","times_seen":64,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/terminal-preview-sm.avif","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/terminal-preview-sm.avif HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=nEFxkuIQqNjXuRef; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\r\ndate: Wed, 15 Apr 2026 14:54:51 GMT\r\ncontent-type: image/avif\r\ncontent-length: 15312\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: d0d18034deba4f9f661ebaf0bfed1689\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-3bd0\"\r\nage: 239\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15312,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f598e1cca7694af24ec465ffa034f650","sha1":"a5cb5348693d32f62a207d476031d164627c790f","sha256":"ca9de294928e2104012af99a012cc2529d814a816621d3c1a967e8c0399c5b5c","sha512":"4140fbba3e9a0443586887c73eb04a8226fe74ad2e6808c9451d737e1b8d11909eacaedc7ff872f2ab56450499c4d14ad50ebca620921438bac7cc0829850f88","ssdeep":"384:SrIuYmOQeyhUCNki7b8uFeyFikw1iR3J9CM+h:gYdQezCNki7bVxUZiR59CM+h","tlshash":"8862cf927168b421ec6a85f54c2b8f52b732521beb7f29e18e4d7c9e41353e8470ea24","first_seen":"2026-04-14T11:17:10.784457Z","last_seen":"2026-04-15T15:01:33.355424Z","times_seen":5,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/double-preview.avif","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/double-preview.avif HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iiy2WKhfZoLexVk7; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\r\ndate: Wed, 15 Apr 2026 14:58:35 GMT\r\ncontent-type: image/avif\r\ncontent-length: 30281\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 7d62081452408f61a780b049dbf60cc3\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-7649\"\r\nage: 15\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30281,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"033d84c6a638e45cfaed24efdd5fe1a6","sha1":"57610e21ec75618ec40bd3ce2bbac9d75044a9d9","sha256":"011f3b2e37ff8e6780f34550e78ef82e20d4aaf987a433e6fcf2708167d22514","sha512":"89b014a23f963ef59d29230779dc8ec9ecfac1a7083582b43f31ac2ec69879a8fb6653134ccfa75c196b0c8f58cd5a36fb13fe9ba90c6f17c2292d8d3e807c6e","ssdeep":"768:gTya7LI69SKojbRCzSnKZMk3uXi8BCfVfFoOuTwab:/wSKYRCzcMlmCfVNMb","tlshash":"4ad2f17bf7d12151e656b371671783da3965e5e2b1342430839c906be13be8fa23be01","first_seen":"2025-03-05T20:54:25.009371Z","last_seen":"2026-04-15T20:09:23.910607Z","times_seen":18,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/terminal/home-banner-keanu.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/terminal/home-banner-keanu.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=kXuGoi5RJLiCfcOR; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Vhxh1PeqbCqe1E37; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:58:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 49090\r\nlast-modified: Wed, 15 Apr 2026 14:03:35 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 2484871cb430928da35d28cfb4d14fc0\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab7-bfc2\"\r\nage: 14\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":49090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a2a4b40761cbc8ae21233f836d69e5c","sha1":"eb42b80ab99395a9cbe15680c5b36e41fc37a636","sha256":"f6c1935a20dfbf0a281d8ce059a41b656251752fa1b341bdcb48325cf1ab75ef","sha512":"049bd10d80172d32177c8078a4c803a4fd44e6850d11117e5018aab395ef7ccc4ce65c497afaaea3cf1d8007ac3fc019f02259d52d59d39948f7825d24aa0455","ssdeep":"768:iDKER1HDNuVYA3NiWnaGZt5dzBa+731Ppj4sDnxjS75AgGs3HvbyNHnZfLQHRN7F:S1RkCAoWnNZt5NBz7RDYGgv3PbyNHCxP","tlshash":"f02301369325b2782dc8ffa48d0e1a1eacc3c4d552ec3920c18de0b6969a158f556f6a","first_seen":"2026-04-14T11:17:10.786567Z","last_seen":"2026-04-15T15:01:33.267688Z","times_seen":5,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/svg/arrow-right.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /svg/arrow-right.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=kXuGoi5RJLiCfcOR; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8YNqCQxUSH3iZoPQ; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:58:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:35 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: a2b893390aa0e302782b65499e905820\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"69df9ab7-226\"\r\nage: 0\r\ncontent-length: 307\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":550,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0443ac330ecd498f0cf970ea9b7098e2","sha1":"4320129368eb47c0490f3974b397412a1baababa","sha256":"662741efacbbe58631edd78e038515ed1c4e0061d798f748f66163ee430781e8","sha512":"8b887a52aa671e7b71e506c6ad9a14d57f166875c2ff52e01c9de734d414ba6f31ccd700d9d55c412f8cc116b86a99f081837b438aec7dd94c0cc338d8356585","ssdeep":"","tlshash":"16f0c0c98bf82bbcb0411de054aa102028ca945b7624c38d636b6716f3244f90024725","first_seen":"2026-04-14T11:17:10.772897Z","last_seen":"2026-04-15T15:01:33.326992Z","times_seen":5,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloud.this.team/rimming/20260219/1470i113014akYpxh.webp","fqdn":"cloud.this.team","domain":"this.team","tld":"team"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.879Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /rimming/20260219/1470i113014akYpxh.webp HTTP/1.1\r\nHost: cloud.this.team\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/terminal/home-banner-bg.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/terminal/home-banner-bg.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=kXuGoi5RJLiCfcOR; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=A2uJzG3OyyORbTCi; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:58:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34510\r\nlast-modified: Wed, 15 Apr 2026 14:03:35 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 454770cadef80bf4c92d664d136fac73\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab7-86ce\"\r\nage: 14\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":34510,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 780x992, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c645bc4d786f21ce66b6754accc8be4b","sha1":"d9fd626e9b68d78773c76ef79f06eb3ae5fe59c4","sha256":"1734275b72333be350727f89905e335f7842236e8805a100f023c9848473e227","sha512":"e41626e8ec530de17a41d9ae0a4061b56ba4b8ec594505035407395b6b682610a75082ee6fb03875a08fc6022c8fddd9a2ebd8a582c216def78cffdbd2af121a","ssdeep":"768:AyLu4zF71633D5CN3JiV5ptn1mgbQjYAz/vauTO3bi4iX:AyLhVSVm529nyjYAzaMwa","tlshash":"caf2f1766180a731a59c8d73e460a35d04bea280cafe8f73215d918df51e9a4fd2c2bc","first_seen":"2026-04-14T11:17:10.75507Z","last_seen":"2026-04-15T15:01:33.253453Z","times_seen":5,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/fonts/inter-semibold-2.woff2","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /fonts/inter-semibold-2.woff2 HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/assets/index-f4c6c4ff.css\r\nCookie: __ddg8_=LpU0nr9bJTdlI9aS; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=sMJdgzZG9cBqRK2P; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:58:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 106788\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\netag: \"69df9ab6-1a124\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: f179f0db173b32b6dc604f77c37a89a6\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":106788,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 106788, version 1.0","md5":"920533ddd1d6ea543f7fc3e89b4556bb","sha1":"bc11a427dcb55d1354a5ea07bbc353c57fe9cc0b","sha256":"d6d0905419e1e821c57189396db46ffe335960bd68befedddaf9e73f3f2e7a3a","sha512":"08edf9e3b3b03eb44ec7b194468eb969e72d51b0c66946ece974d0d6c1b8b738facd155c576b8dc1302b0889a5c04924c44b91cbedb6ed0c64c72c780742a571","ssdeep":"3072:uz6Qf75dUBRMxnGF/g7OVr5eaHPDwqK6wIms:O75LxnGFdVrnDc6ks","tlshash":"b7a312f67491d415f90f36f99b77a0251abd1957b4bb4214c3833cab41ee08a7bacb02","first_seen":"2023-05-21T06:58:03Z","last_seen":"2026-04-15T15:01:33.27655Z","times_seen":1027,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":273,"dns":0,"connect":0,"send":0,"wait":136,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/flags/ro.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/flags/ro.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=B5CIlE8jqFuddlrz; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yCsGITtWanmZa8zc; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg10_=1776265129; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\r\ndate: Wed, 15 Apr 2026 14:54:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 638e48fffef59b2d4fe83479038878c0\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 206\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-189\"\r\nage: 239\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":393,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1a6bfb2600e320974d4fb032410ac259","sha1":"59a6ed6766254e5ded2ac406065bc2087559eb51","sha256":"04ff0486974efba24ca7ef94c87fbaab70acf3e4251b0fc5ff4ef1f491da968e","sha512":"cb81ef8a14d407bacdc54c953a1afd1b09722b80acf0ee5a76279d63ffda27f1d5cf3fabbc4232aa7053c8e11409534e81802bf7d9d3076941482e3bbe443699","ssdeep":"","tlshash":"ede068e0346cc004d948878d1a6c30b640b2f3d9824e5148b681631abc9c7eb5e21adc","first_seen":"2026-04-14T11:17:10.807529Z","last_seen":"2026-04-15T15:01:33.326183Z","times_seen":5,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/cases-preview.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/cases-preview.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/rollrun-preview.avif","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/rollrun-preview.avif HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=N8HDPbG2lCJgV0JD; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\r\ndate: Wed, 15 Apr 2026 14:58:35 GMT\r\ncontent-type: image/avif\r\ncontent-length: 43362\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 149997dc1e6484a372212ce3bab487ba\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-a962\"\r\nage: 15\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43362,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"86dd810d703c9c61e06498b5117a7ffd","sha1":"9287475b97c3d4609bd47a4af70fe8099ccc8d94","sha256":"898598e3b79fcadc5e11378a066c4128d0334ae1f395c8db10c8535237f6bf28","sha512":"3bcd533d3a0587530b5bd6943de8046e79541ddc3fbbf6a7827e003c4f32378757110d4bf6914198fec3b6fd5b0ea313ee5f15c9338a6ac05f69d70760d96e1d","ssdeep":"768:o/b6u4inqGmPfBaHXJ33NHUmor0GdMg8l+Cpkzc9PipolAtsxAaVfF4tL7KghWRF:9u1ufBaHXVur0cOoCMcgZtkF4+r","tlshash":"7f13f1447f348dacfeac3175494fab802a9a31a930e1dd82f72f245299627cc937c490","first_seen":"2025-03-05T20:54:25.025857Z","last_seen":"2026-04-15T20:09:23.909409Z","times_seen":18,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":55,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/icons/apple-touch-icon-180x180.png","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:47.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /icons/apple-touch-icon-180x180.png HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=Mmyl1gXdFY8GJsF9; __ddg10_=1776265126; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=WNA5lIlUasln7iXA; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:47 GMT\n__ddg10_=1776265127; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:47 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:47 GMT\r\ndate: Wed, 15 Apr 2026 14:55:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 130064\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 51742941ca6f3a657582e3123dd5fc33\r\netag: \"69df9ab6-1fc10\"\r\nage: 176\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":130064,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"88bf7a80e5077e6827e41097753d1e97","sha1":"ba35ec988f8447c5c90eb94897cd7511c6927771","sha256":"1effd5ee00f67a9dea5f252f77096588c5b5c57f04f93f4b55c652ed9d4b39f9","sha512":"99363ed6556ce0435d67ed792a4945144f06adcdc7d5fb95ddce8fc6142bdb1dad64933a01489ce25f291314fbfd3930202624fa99ebbc1a247b808c0ce6d1c3","ssdeep":"1536:vp36V0Or5gpDKddd4rZRFae7391fkFY/ajnzPZYLVoUA943kdY0XiHSjvJpVpaWR:ScHkjnNJOzPK","tlshash":"79d3c4027f05e506d4661e718ab4c7e9a330fc4dab26934735d6ae2bbdee6c35d022c4","first_seen":"2026-04-14T11:17:10.815054Z","last_seen":"2026-04-15T15:01:33.360679Z","times_seen":5,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloud.this.team/rimming/20251122/2603i073408P30gBF.webp","fqdn":"cloud.this.team","domain":"this.team","tld":"team"},"ip":{"addr":"186.2.165.19","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.this.team","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 11:32:09 GMT","end":"Wed, 06 May 2026 11:32:08 GMT"},"fingerprint":{"sha1":"1B:9E:C0:F5:46:2A:E5:FD:FF:D7:14:42:7A:A5:06:8D:66:AE:0B:9F","sha256":"D0:4C:ED:F7:DE:C5:A1:3E:0D:A5:4F:8A:74:F3:43:BD:F4:CE:58:86:B5:28:30:30:13:C8:00:A0:82:23:5A:6B"}}},"request":{"raw":"GET /rimming/20251122/2603i073408P30gBF.webp HTTP/1.1\r\nHost: cloud.this.team\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=KaKOjJFgUlOMNRy3; Domain=.this.team; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.this.team; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.this.team; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg1_=MmM46cuuvPqcjBeqLnmN; Domain=.this.team; HttpOnly; Path=/; Expires=Thu, 15-Apr-2027 14:58:50 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-length: 43494\r\naccept-ranges: bytes\r\nlast-modified: Sat, 22 Nov 2025 07:34:08 GMT\r\nx-rgw-object-type: Normal\r\nx-amz-request-id: tx000008816843edc308cb2-00692167c2-1846aa54e-fra1b\r\ncontent-type: image/webp\r\ndate: Wed, 15 Apr 2026 14:11:57 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-do-cdn-uuid: bfde7bd0-6393-426c-9ccd-b2c8865bc9da\r\ncache-control: max-age=3600\r\nddg-cache-status: HIT,HIT\r\nage: 2813\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43494,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 835x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f0db726f123feeeeb0872c9a8a07ece5","sha1":"ac63425c7fd33d1c11edf4109c005d361637fa76","sha256":"a625fab52b2ca44b43f43ec2f2414e97ba5afe9597f371047423fd5f68f205aa","sha512":"1b3401d7275f75fd708eee4d668c3e449259308d8347c493314ee0a7e0ae3332fef6ce055d27ce3f887d189b05eb6abde59574779dc89a20ca92b115cffd6587","ssdeep":"768:aYFogydfxs90BUGJrn/tcUTSTVW4SVGUDv2/JWDt1zG49ICv083FgTL/w5:aYGgQfDBUGJr/tjShw0UDMWDXGMlsjy","tlshash":"d413024b0f85f83810c5c62061ad9a4079d5e6c6d81ca1ed875768f72ce278befa3b43","first_seen":"2026-04-14T11:17:10.823217Z","last_seen":"2026-04-15T15:01:33.360173Z","times_seen":5,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":116,"dns":0,"connect":55,"send":0,"wait":164,"receive":139,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/botgame-preview.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/botgame-preview.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/upgrade-preview-sm.avif","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/upgrade-preview-sm.avif HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=VSZWELlrQ6dpQoxQ; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\r\ndate: Wed, 15 Apr 2026 14:54:51 GMT\r\ncontent-type: image/avif\r\ncontent-length: 49119\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 3e4bd5ac7c6cf91546c1541e3b85f126\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-bfdf\"\r\nage: 239\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":49119,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"96edfe7a8b4096f3b343abacc56d1df9","sha1":"dae5bf479d90cd2bdcde005b74323cb51be157ef","sha256":"50f28b2a19342efcc31ca6dc7215583cbc67f199d67c6f62a5f3f30f65523448","sha512":"2ee1710ebc456159b827a25ac0936b284236b450c99ec757a6e077c3ce528b68e383b51c64fa76920b1f395aead642c3fa64fa7f1c6bf11e6aaa68d11ff7f87c","ssdeep":"768:1yhlf7e/gt936i0c2CGTKrgecQRS8Sv9aZgI4+3fRD7GjtQL72QddviHqUC5X9eC:2lfy4P36iX2CWJwS8SlaZgh+3cjmLVdJ","tlshash":"042302316a80798bc15e3537cf16ed31666474c2e22c1aaddf872f423ee4866059bfb0","first_seen":"2026-04-14T11:17:10.777729Z","last_seen":"2026-04-15T15:01:33.275775Z","times_seen":5,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/svg/big-win/big-win-wing.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /svg/big-win/big-win-wing.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=kXuGoi5RJLiCfcOR; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=pEnd83N4myGDdJx5; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:58:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:35 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 4bcf91a4dbdfdf758584ff399245d83d\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"69df9ab7-58a\"\r\nage: 0\r\ncontent-length: 739\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1418,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31b908b3415414ed9c323d22324a3428","sha1":"fac803b0508eb3590e26239103db2b22a07f908c","sha256":"41806c4452dca5be87ef80de227b626aba755ea64a281aa8f4e8862ef6a61e28","sha512":"e191b8c6f88f292edea5ef60925afe92fe7c2d21e578e68db0d662be553f9d45d98c1b3e1210a412f29e5f2bf93e60fdfcfc70738dffe62cd3288f6ca3d74974","ssdeep":"","tlshash":"f52176a6d3fa11f0d005f7f4d6138734755a4c759e01a8ee86d00b98e51605cce4add7","first_seen":"2026-04-14T11:17:10.789429Z","last_seen":"2026-04-15T15:01:33.349257Z","times_seen":5,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/double-preview-sm.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/double-preview-sm.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/crash-preview.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/crash-preview.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/assets/index-371a5991.js","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:46.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /assets/index-371a5991.js HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=OvrSRH1SXZeNpiMs; __ddg10_=1776265126; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Mmyl1gXdFY8GJsF9; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:46 GMT\n__ddg10_=1776265126; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:46 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:46 GMT\r\ndate: Wed, 15 Apr 2026 14:58:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 15 Apr 2026 14:03:42 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 747a76f353af5a65f4a18ff2003aaf9b\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"69df9abe-7270b5\"\r\nage: 0\r\ncontent-length: 1838795\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":7499957,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56314)","md5":"8bca16958d1053edba5c88d9bd78891d","sha1":"1ece9c50a2e395d7af9da1ca72f8f0650510886f","sha256":"7116f30fc4b58f7e40566cca4aff22a5419fbde5ce5a38dd1f7de91404da2be3","sha512":"4398b15337a32ed77d103f7c17a0aba57b541f14c2948d0945b4461415d88b5adbc35a63999f27108b58eb1af20430180538a15945106c2ca8cc683b39b8e3d2","ssdeep":"12288:0tNPvcVBO0TIxX/dNkrlBTPhjSJid09+hUSnn75p6lPo0N3E:0tNPvcVX+VMTPhMiSSn75p6rVE","tlshash":"72356a158dd1b3a605c303847ac6cb5bb7bc4289c1a5c452bacec36907ea9e4d57f3e8","first_seen":"2026-04-15T14:59:17.681474Z","last_seen":"2026-04-15T15:01:33.255573Z","times_seen":2,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":406,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/svg/help.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /svg/help.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=kXuGoi5RJLiCfcOR; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fHAoOhXmZt2VOXyv; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:58:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:35 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: ca8b999b0a5b9e31c92eaf8e58589ecb\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"69df9ab7-2e8\"\r\nage: 0\r\ncontent-length: 375\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":744,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8115fd46cf3fe10b84450e6973d123e5","sha1":"aebed9e1682ebd2b23ff9ba360263292d9867ea1","sha256":"af59ebb6cc51fc98c80ef350eaa80ae46cc470affd104f3017629eb5062b66ad","sha512":"5cb0db8f0c4fba56e646a88a78b217b2fb7dc78e52c1b8121f6133ef6d68a3507dc2c1e215b372dfdf34cd0fd5304afcda89eb23ecdd95b1cf8511d288403dbc","ssdeep":"","tlshash":"b40190d4c31a0ebcd6844bb34574c81215756247f226c95ee37d1776a644eb000e0cfd","first_seen":"2023-11-12T19:52:50Z","last_seen":"2026-04-15T15:01:33.324538Z","times_seen":15,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/svg/bonus.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /svg/bonus.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=kXuGoi5RJLiCfcOR; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FTAB0iSHb3ShdiZk; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:58:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:35 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: b5c4a855e5a3633a4083759bd6c5f7ee\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"69df9ab7-368\"\r\nage: 0\r\ncontent-length: 425\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":872,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a62b33208aba89b2486afd3d47d6fd15","sha1":"c0d868cfb24f588f5913ef32bab71886ab58b223","sha256":"c8e276cabc3a0c3a03e53d99e9e6bd458e6c42eea1fef2d8c7cb75de5a7da2ab","sha512":"2eadf20efa6e433b99ae8cd49c450c75a4571150ec9c2da36d26af39e705c2600e9d84114581bff67e13cc79c0f6c5a1547b51debc1fed77ad0ecbe190b3fbd8","ssdeep":"","tlshash":"ca115973539da1b9e4c8019d44b1b46c20cd49dfb057a18dbbeb9dc23d0529867b8d68","first_seen":"2023-11-12T19:52:50Z","last_seen":"2026-04-15T15:01:33.268476Z","times_seen":8,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2run.app/current-state?montaznayaPena=8369bfd8329be9974b68ab968318ea13","fqdn":"cs2run.app","domain":"cs2run.app","tld":"app"},"ip":{"addr":"190.115.31.208","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2run.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 13:14:40 GMT","end":"Mon, 01 Jun 2026 13:14:39 GMT"},"fingerprint":{"sha1":"F7:A2:8E:EC:04:91:B0:14:56:71:AB:67:B6:9A:82:9E:8E:BD:95:75","sha256":"8B:90:95:BD:5B:C5:81:13:0C:0E:B1:09:66:F9:D4:FC:D0:4A:7D:17:C1:E2:DE:E7:6D:85:21:8C:18:AE:C1:FE"}}},"request":{"raw":"GET /current-state?montaznayaPena=8369bfd8329be9974b68ab968318ea13 HTTP/1.1\r\nHost: cs2run.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://csgorun.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9yHNyM7rvMGbIdKS; Domain=.cs2run.app; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg10_=1776265129; Domain=.cs2run.app; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg9_=91.90.42.154; Domain=.cs2run.app; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg1_=XbNPkoBLFwgG0Y6guTOb; Domain=.cs2run.app; HttpOnly; Path=/; Expires=Thu, 15-Apr-2027 14:58:49 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 15 Apr 2026 14:58:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://csgorun.live\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"4e1-r/2aubkCg/Kyyz7HfVpSy394jTg\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: c5d5477010187d1f4c0b48d6b9874d8e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1249,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"14f8747a715950005aefd5ab707d1826","sha1":"affd9ab9b90283f2b2cb3ec77d5a52cb7f788d38","sha256":"62c860e77259aa585726f05ba0a1f4bd5bccb4b7735b01ad4d7d0ca4244dba70","sha512":"18d5971ff875941bbc09d06e5b4e98b8ebf2c960ecc5fdc2c2ef52ab9db7d7ebc3b0403021c4d3dea5d87bb96d5136fd7a379af2f953cd555a5431f6eaae631a","ssdeep":"","tlshash":"f32121852c5b6bbe758022a8f9093e57591e007720850a3095dedf88e3ed4bf7023b6f","first_seen":"2026-04-15T14:59:17.68526Z","last_seen":"2026-04-15T14:59:17.68526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T14:58:45.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OvrSRH1SXZeNpiMs; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:46 GMT\n__ddg10_=1776265126; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:46 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:46 GMT\n__ddg1_=hE8j0o9QvvJXnCm9kVV5; Domain=.csgorun.live; HttpOnly; Path=/; Expires=Thu, 15-Apr-2027 14:58:46 GMT\r\ndate: Wed, 15 Apr 2026 14:58:46 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 15 Apr 2026 14:03:42 GMT\r\netag: W/\"69df9abe-2b30\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 4435a9627afe795d5d5901dcfccb6fc2\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11056,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1264)","md5":"168058e8f4865b025700e265e20e41d0","sha1":"a4402a92dd219ae1559b9219235f8ec1f2470b54","sha256":"ff822e16047824a9b2ef73e01c643c110bcff63ff264e41776aca3fb8ba7da69","sha512":"ebb3f2f2e6183797194dd21c09f9260b76d6447bcdc26d9c256d9258fd328a11f64b28293fdb22aeb3197a958f875c3340c12318dbae415ae4b352c101971307","ssdeep":"192:RyVj/jKTOV7QkQZK9bxZsfP69/97lB5pF4Ou7UJRHyfaBRaJwHgGtgJKKu:fTOV7QkQIzD7l7b","tlshash":"b232d60b4de300192913b07bebf776499621c05bca05ec197ddc3184afc2e924d63ba9","first_seen":"2026-04-15T14:59:17.68722Z","last_seen":"2026-04-15T15:01:33.350851Z","times_seen":2,"resource_available":true,"data":null}},"time_used":682,"timings":{"blocked":135,"dns":29,"connect":50,"send":0,"wait":412,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloud.this.team/rimming/20260219/1470i113014akYpxh.webp","fqdn":"cloud.this.team","domain":"this.team","tld":"team"},"ip":{"addr":"186.2.165.19","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.this.team","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 11:32:09 GMT","end":"Wed, 06 May 2026 11:32:08 GMT"},"fingerprint":{"sha1":"1B:9E:C0:F5:46:2A:E5:FD:FF:D7:14:42:7A:A5:06:8D:66:AE:0B:9F","sha256":"D0:4C:ED:F7:DE:C5:A1:3E:0D:A5:4F:8A:74:F3:43:BD:F4:CE:58:86:B5:28:30:30:13:C8:00:A0:82:23:5A:6B"}}},"request":{"raw":"GET /rimming/20260219/1470i113014akYpxh.webp HTTP/1.1\r\nHost: cloud.this.team\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=UiTWxe4fSlfeuBNf; Domain=.this.team; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.this.team; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.this.team; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg1_=h77xaESRkeXLAYx3XDFu; Domain=.this.team; HttpOnly; Path=/; Expires=Thu, 15-Apr-2027 14:58:50 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-length: 119628\r\naccept-ranges: bytes\r\nlast-modified: Thu, 19 Feb 2026 11:30:14 GMT\r\nx-rgw-object-type: Normal\r\nx-amz-request-id: tx00000f82a030cbbb85972-0069971c41-184880e93-fra1b\r\ncontent-type: image/webp\r\ndate: Wed, 15 Apr 2026 14:32:18 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-do-cdn-uuid: bfde7bd0-6393-426c-9ccd-b2c8865bc9da\r\ncache-control: max-age=3600\r\nddg-cache-status: HIT,HIT\r\nage: 1593\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":119628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"20d02f402cbc4d2be7ac63d605c72ab5","sha1":"2941493999131f17b778ddb06c52079e55ff2209","sha256":"4165a5daea774806787af3a0588a078048f6ba2f5014fd90ca3b41ffdfbb5b79","sha512":"cdada2a9ba7683209179a1e2e69d5caeacb8b4df0e4ab416c7f52d3f491c319722a26e9e698ffb8422efbf70fd7f8ce034467de03d070bd03300100a53ce4ca4","ssdeep":"3072:UrBYZjcPUysWQzhqZWsVo97aEg9YUU2kp9Oz/gxAMv6:UrBY5cxngano97Ic2k3OzbMS","tlshash":"c9c31393d1c78705dac2c7b3968631a97f404586490dbde761a763038eb5e398aeb333","first_seen":"2026-04-14T11:17:10.740431Z","last_seen":"2026-04-15T15:01:33.254491Z","times_seen":5,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":119,"dns":0,"connect":52,"send":0,"wait":163,"receive":181,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/double-preview-sm.avif","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/double-preview-sm.avif HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FBAKndebJmH2xbMM; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\r\ndate: Wed, 15 Apr 2026 14:54:51 GMT\r\ncontent-type: image/avif\r\ncontent-length: 21188\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 5e189bbed95a5fb8a158666f73ab253d\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-52c4\"\r\nage: 239\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":21188,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"d573950ed61fa31a6c2c9b8a1d8aec75","sha1":"a72b5c155ee7264a4a4126d1294891195a266c4f","sha256":"1f5d7e8c665b54fd1908d7333c52c6c04cba053d799374230fe65ec64977ca1f","sha512":"5a501a9d933b8c024f9b541b86869137adf85833094d8ed5129df64a50d919fcfb550299381e1f7f10509458015b54877f00b7ad407aeaacad6e0617f3d52ff6","ssdeep":"384:SFiLYpvM3/vTwfi7XykAV/dnSRi7gEjpcjPn5DztboJv6m6zw8pWavan5PK4I:mighfiSpdSM7wjPn5Rub6TUav+5PK4I","tlshash":"8d92e1d28967b027e9bfc176c0bbdd03760089b2ea715d7904e17880761a26bbf70f42","first_seen":"2023-11-12T19:52:50Z","last_seen":"2026-04-15T15:01:33.296305Z","times_seen":9,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/botgame-preview-sm.avif","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/botgame-preview-sm.avif HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=juHvDuLsE73B781U; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\r\ndate: Wed, 15 Apr 2026 14:54:51 GMT\r\ncontent-type: image/avif\r\ncontent-length: 19506\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 9dd6ae464bb4731e9f6a973436251186\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-4c32\"\r\nage: 239\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":19506,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"36eb32aca93891153e208822a6e4dd87","sha1":"2aaeded890a209f0b7934e6788af412dc3fe3efe","sha256":"02e12dea5d258ba54069f26e23841fc859ec534256fa4b5df983d2bebd69f2de","sha512":"65237a9cd121255447e063939eac237fc4bc4bb83dfcda6624786a21b5c92a1efd204ed757cf68c2c1c4ac36f701bda18792f7781ea166bed4d6d2489af86aa7","ssdeep":"384:S274cKo/l0UmGxED3gGUiIKc/7KWcklW8+2BBWno4YRyq4MA1Ul1:97vJJRxED3IiIj/erytBoo5f4MA81","tlshash":"b992d0b111003a6dce4d75f9f169e707f402519c3040d44fb4897accdba997ecb24b6a","first_seen":"2023-11-12T19:52:50Z","last_seen":"2026-04-15T15:01:33.342296Z","times_seen":9,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2run.app/v1/marathon/state","fqdn":"cs2run.app","domain":"cs2run.app","tld":"app"},"ip":{"addr":"190.115.31.208","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2run.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 13:14:40 GMT","end":"Mon, 01 Jun 2026 13:14:39 GMT"},"fingerprint":{"sha1":"F7:A2:8E:EC:04:91:B0:14:56:71:AB:67:B6:9A:82:9E:8E:BD:95:75","sha256":"8B:90:95:BD:5B:C5:81:13:0C:0E:B1:09:66:F9:D4:FC:D0:4A:7D:17:C1:E2:DE:E7:6D:85:21:8C:18:AE:C1:FE"}}},"request":{"raw":"GET /v1/marathon/state HTTP/1.1\r\nHost: cs2run.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://csgorun.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=IOTjnl7CkvxycaPr; Domain=.cs2run.app; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.cs2run.app; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.cs2run.app; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg1_=aoarPNMJuJZ2F1SPbHmX; Domain=.cs2run.app; HttpOnly; Path=/; Expires=Thu, 15-Apr-2027 14:58:50 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 15 Apr 2026 14:58:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://csgorun.live\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: b9c2725aca6fd679ae018c89a85460d0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":22625,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a9bc264205c6c0fc31a8980bd78f9817","sha1":"9e4b4c3778086c5bf361c28107075e832d6ebe54","sha256":"a7bc96f634106e8cbb048d0782ce4c02a51f4a1291c1bc1e336621f4b6beeee8","sha512":"829c9ca33c869d57ad1f51e86868ea70fae4301a1d441920eace735c63d622a0bd4b8f02ba8d758dbe4ef0cb2e9f4f6468043934d1e8cc4bc0f2ee12fd7e0ed8","ssdeep":"384:jWtC9dfYuG/U6eObkKxrbv9WaKkCojrb/C:jWtC9dFG/U6lbPrbv9ckCo3b6","tlshash":"dfa29a4674090db9eb729a427c4a78476edc27cade294fe57bcdce0425c29da4203cb7","first_seen":"2026-04-15T14:59:17.694115Z","last_seen":"2026-04-15T14:59:17.694115Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/roolrun-preview-sm.avif","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/roolrun-preview-sm.avif HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FlppDtoZavERBj8p; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\r\ndate: Wed, 15 Apr 2026 14:54:51 GMT\r\ncontent-type: image/avif\r\ncontent-length: 22388\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: e8a0281edb746729821c661dbdbbe4fb\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-5774\"\r\nage: 239\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22388,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"71c46fa231eb21a9a4ad84c06928cf51","sha1":"f5587a64b78c8e2f14914d596dcd138637b50f01","sha256":"4c205628b396ba1587ac788ce70367959efcab39f649735becfb0e7746b5fb2e","sha512":"a5a360d736c8807ac17647b27d48670776be97e7f3eb979a443bf9976b7d84b60ac7e76115600b4eca16f34abf46721cac1d97efac181a494d5434a162b7d776","ssdeep":"384:SGXuYyupwGkqjxEtEJSkCQynuURfXMXrHVnvRLaYJodKbPzDM4E5P:z1pwGlj+ujYnujXrHVpJedkPzD1u","tlshash":"61a2cf0d91630d0ddc71c3729fc750505a66ee8c5a923e89d6c0f97b5ac82b6cf69e0e","first_seen":"2023-11-12T19:52:50Z","last_seen":"2026-04-15T15:01:33.297243Z","times_seen":9,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/flags/en.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/flags/en.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=B5CIlE8jqFuddlrz; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qDNdNGD5D1nyhx7x; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg10_=1776265129; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\r\ndate: Wed, 15 Apr 2026 14:54:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 8e25ab45719edb91707444d2df3407a7\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3998\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-4c19\"\r\nage: 238\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19481,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8165a18673a676700f7aaf25dc2e9a32","sha1":"f8addb42fcac72d148df05c5b12f239653ba273f","sha256":"993fe67dbae46fcb04a8c6a21954867afe32d54bacab545c61f4093248616691","sha512":"31a7dbd71ec0dce47794a1a300c867629bf2447018dbff38ad170e9ec94de1a0f778567922a3ff0015e45aa2838c28ac6bff5afaf4868feb78c518f02ff91e6f","ssdeep":"384:a1o4CRMcCawILcxAo0XyIl4pXEmdLsBNm6HAeAJnr5zq99yeV:VSJ5xAniY4pnQnxV9","tlshash":"839293f532a0c0d4851b8e94ee1bb936a82f3cf99fca51cd4194ec64b9b569ece44dc0","first_seen":"2023-05-25T17:50:47Z","last_seen":"2026-04-15T15:01:33.319309Z","times_seen":73,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloud.this.team/rimming/20251122/2603i07340373j1nN.webp","fqdn":"cloud.this.team","domain":"this.team","tld":"team"},"ip":{"addr":"186.2.165.19","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.this.team","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 11:32:09 GMT","end":"Wed, 06 May 2026 11:32:08 GMT"},"fingerprint":{"sha1":"1B:9E:C0:F5:46:2A:E5:FD:FF:D7:14:42:7A:A5:06:8D:66:AE:0B:9F","sha256":"D0:4C:ED:F7:DE:C5:A1:3E:0D:A5:4F:8A:74:F3:43:BD:F4:CE:58:86:B5:28:30:30:13:C8:00:A0:82:23:5A:6B"}}},"request":{"raw":"GET /rimming/20251122/2603i07340373j1nN.webp HTTP/1.1\r\nHost: cloud.this.team\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7fGTPdFDHlyigwhp; Domain=.this.team; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.this.team; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.this.team; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg1_=godczI1lGh8vjhtJANPX; Domain=.this.team; HttpOnly; Path=/; Expires=Thu, 15-Apr-2027 14:58:50 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-length: 75524\r\naccept-ranges: bytes\r\nlast-modified: Sat, 22 Nov 2025 07:34:03 GMT\r\nx-rgw-object-type: Normal\r\nx-amz-request-id: tx00000da9dbe20e9e74945-006996dfaf-1843ab90c-fra1b\r\ncontent-type: image/webp\r\ndate: Wed, 15 Apr 2026 14:48:13 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-do-cdn-uuid: bfde7bd0-6393-426c-9ccd-b2c8865bc9da\r\ncache-control: max-age=3600\r\nddg-cache-status: HIT,HIT\r\nage: 637\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 860x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7d898db7a89ad350b48c633e0c7d6529","sha1":"e826735c002691d0ea49e12bea0d6d2247ce3f74","sha256":"53efe28157a0a6727a615a4a7a73d8d9ebe5efac7954332075366a37bd47b38c","sha512":"89e40f5a79e3ee9952c0cead97b75a245e2b8d74518afc053cc1fc799f17e943ca7e7898d261ed9f81fbe06a1ca6c9be156f1db1614da5898ac5504eedcc77c4","ssdeep":"1536:vaz+4Cqrf7vQxrMbhMAkgR7jvwCuDeBVheKO5Fo8V7K:va3zf7vcrTADzwND3J7K","tlshash":"287302f10c9ab047be331d969b8b9917f822e01d6425851fa21e3f05e78f161625ef7c","first_seen":"2026-04-14T11:17:10.764598Z","last_seen":"2026-04-15T15:01:33.350119Z","times_seen":5,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":112,"dns":0,"connect":51,"send":0,"wait":166,"receive":191,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/svg/raffles.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /svg/raffles.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=kXuGoi5RJLiCfcOR; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ohYqw4oHim0yQFsD; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:58:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:35 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: c82d6c0f043c2d99f3f9c84947e77789\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"69df9ab7-726\"\r\nage: 0\r\ncontent-length: 633\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1830,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b88870c617e4568b6ec767a04185b8e7","sha1":"ac5191362b34c5b96fbb03996a127ee08176abb6","sha256":"542b54971f64564cf2f2d4107644f136fc4d1c77db2f6f63e7ac300dc21cd17e","sha512":"e4f199786f0c75b100ce2d8d81deede284dbdccaadd53b70c0b52ef0798a3f0ccc6c39560c83b2a9a5f5efb237e94778ab3bd5b89feeff980af698d3186b17da","ssdeep":"","tlshash":"9931bcbbb1d02ad49709ef239cd4098f3b1b24f6bb57f98693914364c96168913888d8","first_seen":"2026-04-14T11:17:10.787907Z","last_seen":"2026-04-15T15:01:33.357172Z","times_seen":5,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/avatar.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/avatar.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=Vhxh1PeqbCqe1E37; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ctJ32MlJ2rDGS9kD; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:54:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6310\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: a597b7e7fd17c4e8a9268b037be1f34a\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-18a6\"\r\nage: 238\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":6310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d5d9c3f8ab23671f5a1f22cf67c6da23","sha1":"99e1be324f45c7032757d96230f74bb57c80bee5","sha256":"2ce75c5c83cf64e2812054dffb0d56d6cdebf355cbccba9dbe7a3971fd20c834","sha512":"b1f490ff43c3efe90d8e0bb7f54c3e00dfdf0f1e0816eef4210caaebdd1ae6df97d6b86107d41ff6341fa3ab2cb194f108b3d425e85ff65f863fdaa8ef6f5487","ssdeep":"96:g6flZDTuzr4PF6W95NdP/BN3XEO2dXNsBP1V4mX2iXQW5y2Eq+5UXB5Cx/:5l9m4Pp95NdP/33v2cP1V4mnXoYHyR","tlshash":"4ad19ef23ef929416c148a95ad734032ed46122d97d187ccf41dff515bf64302e1d259","first_seen":"2026-04-14T11:17:10.790692Z","last_seen":"2026-04-15T15:01:33.325428Z","times_seen":5,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":346,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloud.this.team/rimming/20260316/1470i123950VFeKDE.webp","fqdn":"cloud.this.team","domain":"this.team","tld":"team"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.876Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /rimming/20260316/1470i123950VFeKDE.webp HTTP/1.1\r\nHost: cloud.this.team\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/fonts/inter-bold-2.woff2","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /fonts/inter-bold-2.woff2 HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/assets/index-f4c6c4ff.css\r\nCookie: __ddg8_=LpU0nr9bJTdlI9aS; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=KI0OIFmHxE1iPDIM; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:58:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 107236\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 9b4a6eab624e873431452e832a99b5c2\r\netag: \"69df9ab6-1a2e4\"\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 107236, version 1.0","md5":"231f444dc08212ed0133d8ea5c95c670","sha1":"a9fdc76a1229a5db11b54c8790d11458547cd3b9","sha256":"04079eb5aa58d207bc036c8e55d464ea23947d1b1d48d220ebcd1b7c230f589f","sha512":"bbbda8a41a240a423b131614daa024ddb926f70f312afdf5ced0d4f9e945814b8e1bb7e49d0f8a7493dc6d34c6177e71d049020132390f4d4284cefb0aca9b24","ssdeep":"3072:xI6qrWAf2k3962eqVI91804T73Wyk7pKzGoM+lL9YZp3RcqZfbbHCA1o1:UrhuETHVbFTPaFQlL987XHCA1o","tlshash":"43a312e18e02e416cf8ca736e79e311c5d7c9cbf17784de9e0fda6c9287a11884c4246","first_seen":"2023-04-26T21:16:46Z","last_seen":"2026-04-15T15:01:33.32033Z","times_seen":1087,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":273,"dns":0,"connect":0,"send":0,"wait":324,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/botgame-preview.avif","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/botgame-preview.avif HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=bnMhoKFVzBlEsX1P; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\r\ndate: Wed, 15 Apr 2026 14:57:10 GMT\r\ncontent-type: image/avif\r\ncontent-length: 31652\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 6697998faeab0c6bec28fccb7192c78f\r\netag: \"69df9ab6-7ba4\"\r\nage: 100\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":31652,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f7365d4ce636c2dce3c9e3577d4752d3","sha1":"86407e06e2facb201019678520c85df1dd739de9","sha256":"04b2e09f426f050e2a6883fda6a1609abb7633abfc550466afaedff88a52d4dc","sha512":"081af43d7ef63de31fe65499b76f31ebaeaa8a4e91d4b4f9056bb6f59139dec221b980d051b006f87f5db5d56b1fe040225a3d06e315520beed82e6ceb8c23e5","ssdeep":"768:hs7md1+QHVrLiZePKxpgfRGMLxTcoZiEj:hs7md1trOWupqRGMLBcuiEj","tlshash":"64e2e19cf89ed540df282a7e0862482d5b56caf0a38a37df6117401dfe5580be2b59b4","first_seen":"2025-03-05T20:54:25.01122Z","last_seen":"2026-04-15T15:01:33.25297Z","times_seen":6,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/cases-preview.avif","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/cases-preview.avif HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=nHgPl6uq3INyzHhF; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\r\ndate: Wed, 15 Apr 2026 14:58:35 GMT\r\ncontent-type: image/avif\r\ncontent-length: 42900\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 19fe9ecc925fb6486a7a807d7e8cb3a5\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-a794\"\r\nage: 15\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":42900,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"686c3a2773c2d0c4f1f429424c01c22b","sha1":"55aee5b015e9459921de0b4c1d3431bd36011bfa","sha256":"7af34203cea04d04aae4c630bcb85518e11c0f3e79c45bca7d019305af74e793","sha512":"4c430d58ebca2619cce1674cc7b5d01f5e57e2f35bd8a4af7cb928248c407cbe11792f3e7e12a5cff6d95cb17b854fb1072564777102483d0fb4fda48874e37e","ssdeep":"768:nMoKjWTeQU+Sc7xGVWHrbQmc+D61+kAlTmjPGR6c:nMoUcetcMVWLb1D2+zl6rXc","tlshash":"cd130147e6bc5a3dc93cef70c021573877b893542761019a18abe71a6d092f3f5e6b09","first_seen":"2025-03-05T20:54:25.024647Z","last_seen":"2026-04-15T20:09:23.910009Z","times_seen":18,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":52,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/leagues/leagues-header-bg.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/leagues/leagues-header-bg.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=kXuGoi5RJLiCfcOR; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=aoywADhNycGCwXEr; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:58:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 88448\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 9c7ce820c703aa613835cfb69ab32571\r\nddg-cache-status: HIT,MISS\r\netag: \"69df9ab6-15980\"\r\nage: 14\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88448,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1588x440, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3c9b2fa9575d3e0c97fa6b3099db38cc","sha1":"b377f0db05f0a2cf14bd50f9442f35e779d0dd7a","sha256":"675a80155dbbc08660263eaa417425728812bb2e8e86cb4bfce0dd4b13a33a69","sha512":"2ddb73506fb9bd1cad74e967cf8909508c70957fa1cad6690c917b528dcd3608ac20ffff529d2be8d4fa528506b4308dd35f4b2244c1b52505896f85533fdb81","ssdeep":"1536:8RI8/Sy8cJsUtILfC9I2+vOdVTPQKg8lvK9P1R/B8KEy9dHrb9e4HunOj7fG:8eJ2GL2TTYKZKP3GOdv9ew7+","tlshash":"1383128f83a74973f80d6b27fcc95618a49d4bf7ffab907a20051e082b01b54b60d656","first_seen":"2026-04-14T11:17:10.811492Z","last_seen":"2026-04-15T15:01:33.341666Z","times_seen":5,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/flags/ua.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/flags/ua.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=B5CIlE8jqFuddlrz; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=SvRSHoBEF6G4rEoB; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg10_=1776265129; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\r\ndate: Wed, 15 Apr 2026 14:54:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 0eae76a97d51de68739fc13aec158203\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 344\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-2cd\"\r\nage: 238\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":717,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a276d867b3622ce98965fa2ad7db4657","sha1":"706c1ac5f5e7415e8cc2c641c95f776b2a5048a5","sha256":"a97f92c438311eff7c3d8773671bc04a32a93b7067ceeeba771281319cb69849","sha512":"a41e22cb6789f6691f5ca52bb8668d6ac8eabea5b81778df1f841a44e9b586c7af67a62fffac3f8fc3423f408af8884870623dc700c4e86524da12704d32c24f","ssdeep":"","tlshash":"9801dfdc854f442b60756e31efbb7182832113f9969909b4f194e86a3d1eb510d09998","first_seen":"2023-06-05T17:09:58Z","last_seen":"2026-04-15T15:01:33.354049Z","times_seen":11,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/flags/fi.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/flags/fi.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=B5CIlE8jqFuddlrz; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jx5Sk6utq8gxhX7f; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg10_=1776265129; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\r\ndate: Wed, 15 Apr 2026 14:54:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: f5f6dfedc3ad1f63ac45ad85b01df9d6\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 270\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-1ec\"\r\nage: 239\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":492,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0c42600ad05e1adf25d23345868e391","sha1":"2055e3c13f5b9df3fe6d279a9a9c2d246477ba33","sha256":"789d60530ac1cbf5fa41959ec1dff5fdea21d88df275c6fd3dfaee79a42eff29","sha512":"2b09f64827073622e3225ce4d3f146d55e97a31c01982434a648da1ddc99b0e784e7dc5e52a9ccee1773900b3b9a74573c2275dd5d264ed60bb55f615399ab36","ssdeep":"","tlshash":"54f0d410e4acc11ac14d822d497d34050da590c3b34ccea8720407bdbebc5d78ce3e99","first_seen":"2026-04-14T11:17:10.801671Z","last_seen":"2026-04-15T15:01:33.330751Z","times_seen":5,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloud.this.team/rimming/20260326/127453i194257mVBcks.webp","fqdn":"cloud.this.team","domain":"this.team","tld":"team"},"ip":{"addr":"186.2.165.19","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.this.team","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 11:32:09 GMT","end":"Wed, 06 May 2026 11:32:08 GMT"},"fingerprint":{"sha1":"1B:9E:C0:F5:46:2A:E5:FD:FF:D7:14:42:7A:A5:06:8D:66:AE:0B:9F","sha256":"D0:4C:ED:F7:DE:C5:A1:3E:0D:A5:4F:8A:74:F3:43:BD:F4:CE:58:86:B5:28:30:30:13:C8:00:A0:82:23:5A:6B"}}},"request":{"raw":"GET /rimming/20260326/127453i194257mVBcks.webp HTTP/1.1\r\nHost: cloud.this.team\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9PZs27nsRyqTv4Nk; Domain=.this.team; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.this.team; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.this.team; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg1_=aim1cohY0C3xWJCHmLVk; Domain=.this.team; HttpOnly; Path=/; Expires=Thu, 15-Apr-2027 14:58:50 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-length: 209998\r\naccept-ranges: bytes\r\nlast-modified: Thu, 26 Mar 2026 19:42:57 GMT\r\nx-rgw-object-type: Normal\r\nx-amz-request-id: tx00000d9ed2572d8ba1c44-0069ceba00-1a40e2e39-fra1b\r\ncontent-type: image/webp\r\ndate: Wed, 15 Apr 2026 14:32:18 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-do-cdn-uuid: bfde7bd0-6393-426c-9ccd-b2c8865bc9da\r\ncache-control: max-age=3600\r\nddg-cache-status: HIT,HIT\r\nage: 1593\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":209998,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1670x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"719c1d1014063da17e9aab393ef403e4","sha1":"1b6b931116129ceb18d9d4543b105aea0017446e","sha256":"188fe852dd30c52c16b7882b52a0f9e4b48f61b1303f410b46b79397cc90222b","sha512":"545cbce896a7e9e20f97fba66b0447742810ea1146b01ab05247bf61a041882734637746f61b18a73316c484c10b8d6407ac1d08fd0809dfbfbdf7c991473a43","ssdeep":"6144:JREsOvuRTWuZYssohoLw5jaYsa3fcAFCYVN:pOOWu2EoLw1j0M","tlshash":"5d241218897f688acb43954f884a881ea0cd4c6b0553d79fe1c6345be0e20d97f9d9bf","first_seen":"2026-04-14T11:17:10.796434Z","last_seen":"2026-04-15T15:01:33.278476Z","times_seen":5,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":113,"dns":0,"connect":48,"send":0,"wait":103,"receive":205,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"ws.cs2run.app/connection/websocket","fqdn":"ws.cs2run.app","domain":"cs2run.app","tld":"app"},"ip":{"addr":"190.115.31.208","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ws.cs2run.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 01:27:11 GMT","end":"Wed, 06 May 2026 01:27:10 GMT"},"fingerprint":{"sha1":"FF:D0:CC:CE:82:BF:4B:82:9A:4E:0B:10:09:34:F1:EE:94:92:76:0E","sha256":"4D:21:C1:AD:67:5F:E1:7A:D8:A6:96:92:88:FB:17:21:DA:EE:38:E3:72:C4:60:A7:BB:C5:83:C6:BA:59:22:41"}}},"request":{"raw":"GET /connection/websocket HTTP/1.1\r\nHost: ws.cs2run.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://csgorun.live\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: oZjchhbvEjPKILcbbcNuRA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: ddos-guard\r\nSet-Cookie: __ddg8_=ON61KRmw9XikNeny; Domain=.cs2run.app; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.cs2run.app; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.cs2run.app; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg1_=B1m6HspmOurXtnInffc3; Domain=.cs2run.app; HttpOnly; Path=/; Expires=Thu, 15-Apr-2027 14:58:50 GMT\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nDate: Wed, 15 Apr 2026 14:58:50 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: XoKO08zgwKDPpSsKmmVZJO7EJNQ=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Request-Id: 279ed3a3af35c3295a1d95b9ebfba0e3\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":770,"timings":{"blocked":-1,"dns":202,"connect":249,"send":0,"wait":236,"receive":0,"ssl":274},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/fonts/inter-semibold-2.woff2","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /fonts/inter-semibold-2.woff2 HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/assets/index-f4c6c4ff.css\r\nCookie: __ddg8_=B5CIlE8jqFuddlrz; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=DFoykeXbw7bb34GC; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg10_=1776265129; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\r\ndate: Wed, 15 Apr 2026 14:58:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 106788\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\netag: \"69df9ab6-1a124\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: f179f0db173b32b6dc604f77c37a89a6\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106788,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 106788, version 1.0","md5":"920533ddd1d6ea543f7fc3e89b4556bb","sha1":"bc11a427dcb55d1354a5ea07bbc353c57fe9cc0b","sha256":"d6d0905419e1e821c57189396db46ffe335960bd68befedddaf9e73f3f2e7a3a","sha512":"08edf9e3b3b03eb44ec7b194468eb969e72d51b0c66946ece974d0d6c1b8b738facd155c576b8dc1302b0889a5c04924c44b91cbedb6ed0c64c72c780742a571","ssdeep":"3072:uz6Qf75dUBRMxnGF/g7OVr5eaHPDwqK6wIms:O75LxnGFdVrnDc6ks","tlshash":"b7a312f67491d415f90f36f99b77a0251abd1957b4bb4214c3833cab41ee08a7bacb02","first_seen":"2023-05-21T06:58:03Z","last_seen":"2026-04-15T15:01:33.27655Z","times_seen":1027,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":56,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/botgame-preview-sm.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/botgame-preview-sm.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/svg/lock.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /svg/lock.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=QEAZnUU2ZvejQGrT; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\r\ndate: Wed, 15 Apr 2026 14:58:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:35 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 2e7f96621dd8e7f92f3f039fcab1c3b0\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"69df9ab7-24e\"\r\nage: 0\r\ncontent-length: 314\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":590,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b2bb40ee68e187277d8d2f7166c1722f","sha1":"0e3090fa4813e3f9ad80a416d24b022dd239e89f","sha256":"085360e53446d3ffb9d97f6d4e1481f50376b452d4ac2c82ff0867a9029a69d5","sha512":"8a7bef166f07f81bcd9dc7960d8843f372ff3f801746130abc04e3a8a295e70d235e104b4ebf5c459b50c9c3e82ef8ae111ec09ed8d14149f535aa9186913904","ssdeep":"","tlshash":"98f0281aea16425ac55cca45c8f068bc21cd4cdf295e424dcfe79886150c8b8cab0679","first_seen":"2023-11-12T19:52:50Z","last_seen":"2026-04-15T15:01:33.279203Z","times_seen":8,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":200,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/pxl","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:46.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"POST /pxl HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nContent-Length: 58\r\nOrigin: https://csgorun.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":58,"data":"p=sWeNP9ms\u0026t=1776265126834\u0026l=https%3A%2F%2Fcsgorun.live%2F"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Wed, 15 Apr 2026 14:58:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 31\r\nset-cookie: stel_ssid=8fce5d046479b921c7_8219450497130832629; expires=Thu, 16 Apr 2026 02:05:26 GMT; path=/; samesite=None; secure; HttpOnly\r\naccess-control-allow-origin: https://csgorun.live\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type\r\npragma: no-cache\r\ncache-control: no-store\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/gift-green.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/gift-green.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=kXuGoi5RJLiCfcOR; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=eLAUUVBh6CSDdt3q; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:58:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29592\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 560f8514933cae31ec1416657b12399b\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-7398\"\r\nage: 14\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"84a9c06d62e094647068895cb2483448","sha1":"19e246e464e739a70734b41b6611492142c6fbee","sha256":"53f8ca86a184e25243106b7e5e35b92e72eca4711dd6032699708f65232ff2f3","sha512":"5d0a4fe14270df4fba630ceb2f7f92916ee3b8470b6e4e8c77fb6c1217f93f7d1e2290314058ef2641728dda2eeb834c2ec35c8705f0de8692870e2643286263","ssdeep":"768:l6q5/aEnyQ/KuaX7Lf6GSGTDVatd6tRSzvPBD/:llkEnyQ/KuaXSGSCwtYazBr","tlshash":"85d2f15e99b2780b4f5d50fa4d06c26976b8881768c90007dabb40c43f25e8e5bf9efd","first_seen":"2024-08-20T12:56:36.363883Z","last_seen":"2026-04-15T15:01:33.34449Z","times_seen":6,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/fonts/inter-black-2.woff2","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /fonts/inter-black-2.woff2 HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/assets/index-f4c6c4ff.css\r\nCookie: __ddg8_=B5CIlE8jqFuddlrz; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9erKfr45A5zCF1XU; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg10_=1776265129; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\r\ndate: Wed, 15 Apr 2026 14:58:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 103832\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 0040cef915792196cd2f10d6d89389bd\r\netag: \"69df9ab6-19598\"\r\nage: 3\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103832,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 103832, version 1.0","md5":"edf1baa02cd941c61d54610f955f49c6","sha1":"e40b42fd142c5e04e3babba3def4abc67ff410c4","sha256":"1d1374a7e2f7a6d506cfcfb4b5bf6edc78801d9dbf58ceb7f5a6b54d5cee5ec4","sha512":"c9ef739c69cc32555c229883613e92c49dbde3a9cc3ea666ac3aace8a514a0f729e99474408170129985f197fc44d6cbf4da4a8ef9638ae9437ba082d36718e0","ssdeep":"3072:jw0lHtn0DHEC51BZsLwDllMh8B9ZFDueyU9meT:001SDHEC51ULwDlg8B7FDuZUXT","tlshash":"caa3027afcda1a8cd613997e914ccf4c13223a22497da483ed6e9af34d854178c4e937","first_seen":"2023-07-12T19:36:35Z","last_seen":"2026-04-15T15:01:33.322453Z","times_seen":168,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":56,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/rollrun-preview-sm.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/rollrun-preview-sm.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/cases-preview-sm.avif","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/cases-preview-sm.avif HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7AHzaJfujvDKipXs; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\r\ndate: Wed, 15 Apr 2026 14:54:51 GMT\r\ncontent-type: image/avif\r\ncontent-length: 22930\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 468ca2188032deb54950d305f23d1dec\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-5992\"\r\nage: 239\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22930,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"5e85b706c160cbaa4f3587f22db223fc","sha1":"77b905bb83cb8728be8e04960669ce94af52a730","sha256":"a9e9a808605ea595d519b87077e4cf820afb9ad178e265c15a88ea371435ba8e","sha512":"587a167cb542823b6e0560687d91345fed360d7c24c5b21501bacc63b02ed23b311099f345b8c9821a1ae7be700d297787efd831ed9c92e4d61c4eeef335ede7","ssdeep":"384:S6OioxOatDbu77bl8LwTGayN2ymHByxeqatKPzY/GEHmuwKhQCqZxESlSfy42cSB:oxOadbc7klHN2y+yZatKPzSG5KWVZxEs","tlshash":"81a2d00266d81f54f39b2bbf1ceaba47588167f993cb3a1988781f475bd1f00728a134","first_seen":"2023-11-12T19:52:51Z","last_seen":"2026-04-15T15:01:33.348115Z","times_seen":9,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/assets/index-f4c6c4ff.css","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:46.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /assets/index-f4c6c4ff.css HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=OvrSRH1SXZeNpiMs; __ddg10_=1776265126; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Zh2bvvhN9kHWc185; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:46 GMT\n__ddg10_=1776265126; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:46 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:46 GMT\r\ndate: Wed, 15 Apr 2026 14:54:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 15 Apr 2026 14:03:42 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 9bd824ddbe35c882ab7c5e4f4e6c45f2\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 114577\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9abe-b15b9\"\r\nage: 236\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":726457,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65516), with no line terminators","md5":"c620a729e60a8e51481f42e7547fcf83","sha1":"f69265633c38607163ef94ec338ed0a5bd0e70da","sha256":"f4c6c4ff4eb5e272543ad0b59cb5e6552f419f35983389176b20923278ea1400","sha512":"52dc8c3c133db162ee24afa4cb26f660e6f68011175de645902aab24f61be1fea44f1797874b5f0acc9a3863e5f2f8375215fcba199d9a15914469f6ed92331e","ssdeep":"12288:Ca2kqVvtAYuuSTlf84nIdgEriTc1czCVx/4:CJutTlf80Ixc","tlshash":"6df4e8ae9955107ebc37a2f0d2f8a65c692df0c4ee27436db99215005be23f6087fd60","first_seen":"2026-04-15T14:59:17.717427Z","last_seen":"2026-04-15T15:01:33.328616Z","times_seen":4,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/svg/arrow-right-thin.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /svg/arrow-right-thin.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=B7h8rBaXRAqtKdU1; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=hyfTVNMHULUyR2T2; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg10_=1776265129; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\r\ndate: Wed, 15 Apr 2026 14:58:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:35 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 12b3fc8187b16238da7329614dedde33\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"69df9ab7-1db\"\r\nage: 0\r\ncontent-length: 294\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":475,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"35f0d0737a6a9620a60034de41516675","sha1":"03370e580c60532df7ee69b473abf169d13c6ca9","sha256":"16dd593d0bac58dc7536bc0d64df81d86ce376872c8c8ea099ee55f1624a1ef8","sha512":"d353f87c273494a918eb358a2cff66203db971d8642e217f17faad04e6d53cf7aec8f039daf341e6711258f14f906c7e0bc3132fd49e1475cb6e9d5c2a147e36","ssdeep":"","tlshash":"c2f05cca839cbcfbec18813586b4e6053391a25b7f90506da4760c1f611f4d26d35a5c","first_seen":"2026-04-14T11:17:10.748384Z","last_seen":"2026-04-15T15:01:33.29489Z","times_seen":5,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/pixel.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:46.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/pixel.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Wed, 15 Apr 2026 14:58:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 May 2025 16:54:55 GMT\r\netag: W/\"6823795f-652\"\r\nexpires: Sun, 19 Apr 2026 14:58:46 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1618,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1618), with no line terminators","md5":"3b42e329b6c2aff44d40ebf22411d397","sha1":"c93b7e83f2a77c71b9d5dc424c4626e7713f550c","sha256":"105a9cc67f620cda48148d494be7065bdca39b10b15e4890183f2040cc6f0869","sha512":"e1a6dd6622b324de377068e4cf1aea34d0564c71f709439bc1935a85b080bd452512b8d65ad69747a0a9828606df2c3847013920dda88332bbece61433d472ea","ssdeep":"","tlshash":"4531c8f1336a90ed81f220e9515f1a1bd1769b45bc188c84a063fa016434e7b0b379a9","first_seen":"2025-05-31T10:10:21.166016Z","last_seen":"2026-04-15T15:01:33.323951Z","times_seen":585,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":176,"dns":14,"connect":21,"send":0,"wait":21,"receive":0,"ssl":144},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/fonts/inter-bold-2.woff2","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /fonts/inter-bold-2.woff2 HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/assets/index-f4c6c4ff.css\r\nCookie: __ddg8_=B5CIlE8jqFuddlrz; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=GB6ULGoNKieOIVBH; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg10_=1776265129; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\r\ndate: Wed, 15 Apr 2026 14:58:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 107236\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 9b4a6eab624e873431452e832a99b5c2\r\netag: \"69df9ab6-1a2e4\"\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":107236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 107236, version 1.0","md5":"231f444dc08212ed0133d8ea5c95c670","sha1":"a9fdc76a1229a5db11b54c8790d11458547cd3b9","sha256":"04079eb5aa58d207bc036c8e55d464ea23947d1b1d48d220ebcd1b7c230f589f","sha512":"bbbda8a41a240a423b131614daa024ddb926f70f312afdf5ced0d4f9e945814b8e1bb7e49d0f8a7493dc6d34c6177e71d049020132390f4d4284cefb0aca9b24","ssdeep":"3072:xI6qrWAf2k3962eqVI91804T73Wyk7pKzGoM+lL9YZp3RcqZfbbHCA1o1:UrhuETHVbFTPaFQlL987XHCA1o","tlshash":"43a312e18e02e416cf8ca736e79e311c5d7c9cbf17784de9e0fda6c9287a11884c4246","first_seen":"2023-04-26T21:16:46Z","last_seen":"2026-04-15T15:01:33.32033Z","times_seen":1087,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":57,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloud.this.team/rimming/20260316/1470i123950VFeKDE.webp","fqdn":"cloud.this.team","domain":"this.team","tld":"team"},"ip":{"addr":"186.2.165.19","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloud.this.team","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 11:32:09 GMT","end":"Wed, 06 May 2026 11:32:08 GMT"},"fingerprint":{"sha1":"1B:9E:C0:F5:46:2A:E5:FD:FF:D7:14:42:7A:A5:06:8D:66:AE:0B:9F","sha256":"D0:4C:ED:F7:DE:C5:A1:3E:0D:A5:4F:8A:74:F3:43:BD:F4:CE:58:86:B5:28:30:30:13:C8:00:A0:82:23:5A:6B"}}},"request":{"raw":"GET /rimming/20260316/1470i123950VFeKDE.webp HTTP/1.1\r\nHost: cloud.this.team\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PAZnC04q0nxkhRBw; Domain=.this.team; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.this.team; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.this.team; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg1_=WMBewTI37qpPXuXx1pgv; Domain=.this.team; HttpOnly; Path=/; Expires=Thu, 15-Apr-2027 14:58:50 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-length: 250548\r\naccept-ranges: bytes\r\nlast-modified: Mon, 16 Mar 2026 12:39:50 GMT\r\nx-rgw-object-type: Normal\r\nx-amz-request-id: tx000009549d31f6e628a47-0069b7fa19-1a4096667-fra1b\r\ncontent-type: image/webp\r\ndate: Wed, 15 Apr 2026 14:20:33 GMT\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-do-cdn-uuid: bfde7bd0-6393-426c-9ccd-b2c8865bc9da\r\ncache-control: max-age=3600\r\nddg-cache-status: HIT,HIT\r\nage: 2297\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":250548,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"085cc49574883541e14d71e1b17a2196","sha1":"75e15b8ded39442b5bdcbb8d1e350cb6f94661e3","sha256":"df7673cc53bc4cf312b9637d5837714820d45a01887a45d8918c6a18a6972407","sha512":"608dbad9cc265490b8aa2783319e4e44943fa0d20d330af7ce0a6ad262b2ad9007d942e2c23aefcc60c8d2b43f5450ebe6ccbd121a304c3a25945b0519dc0e91","ssdeep":"6144:YRvOiQFzq6PX1Kg9CGWRvpt0OaNxdCAlx9z2u0DqWe:GvDszVX1Kg9CGWnt0O5AJ2pk","tlshash":"163412734b49dd91cbf93322891d73a622253fadbd282d5df204e6624df4122e2b12dd","first_seen":"2026-04-14T11:17:10.780017Z","last_seen":"2026-04-15T15:01:33.348575Z","times_seen":5,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":115,"dns":0,"connect":47,"send":0,"wait":167,"receive":249,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/fonts/inter-regular-2.woff2","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /fonts/inter-regular-2.woff2 HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/assets/index-f4c6c4ff.css\r\nCookie: __ddg8_=LpU0nr9bJTdlI9aS; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=m4xXpEweMPI2mw6b; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:57:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 98756\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 40091ab44fdf411dcb1b5ca9602825bf\r\netag: \"69df9ab6-181c4\"\r\nage: 102\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 98756, version 1.0","md5":"a90c493e75dbd61aec1195dbb9bb6b06","sha1":"a3e3ae8b6f79820b0b393a92fc613f50fb9f03c6","sha256":"ed64c5d83f5fcc357eb8afd0a7b8d9912cae97d88dd57cccb64787bb643c7c76","sha512":"4c3bda6554b08f9378fca75fb24fc9334534f365de8ab28f83228d95871d5c25ca90ba3945c390dc41ed176f4258df86bd5db1849b7d5bc09f257d309cd66cde","ssdeep":"3072:3f52dl72hKiGTrJNGZvdfJVgBz+rbFoGR0F6M:vol7gKiGPc1u6M","tlshash":"28a30217d38fbf2cc371ba7a390b245d225e9280421df6195f48c94a161dead27f368b","first_seen":"2023-04-26T21:16:46Z","last_seen":"2026-04-15T15:01:33.295715Z","times_seen":1628,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":304,"dns":0,"connect":0,"send":0,"wait":51,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloud.this.team/rimming/20260326/127453i194257mVBcks.webp","fqdn":"cloud.this.team","domain":"this.team","tld":"team"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.867Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /rimming/20260326/127453i194257mVBcks.webp HTTP/1.1\r\nHost: cloud.this.team\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/terminal/home-banner-bg.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/terminal/home-banner-bg.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=NVy22AuGzC0LWMKR; __ddg10_=1776265127; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/fonts/inter-medium-2.woff2","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /fonts/inter-medium-2.woff2 HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/assets/index-f4c6c4ff.css\r\nCookie: __ddg8_=B5CIlE8jqFuddlrz; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yYx7ifKHK8zW87Wv; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg10_=1776265129; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\r\ndate: Wed, 15 Apr 2026 14:57:09 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 105944\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: bea27b53fca58c42c32c46b14d4cd9f2\r\netag: \"69df9ab6-19dd8\"\r\nage: 100\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":105944,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 105944, version 1.0","md5":"943a67750859470af9d9989ae91aef35","sha1":"97e6452fe698bf7cbb9ffc164e967c60cb39c7dd","sha256":"a4ad8ac69b901406c6d29ec3173cbf7b00f4652b997b40033c8c640028a6db1e","sha512":"f6ebe9bba068627ee80763fd2d88778ce513ba144991abbdc8f61789adf04c42a585c17d80b1301e9c0c2546a9b06c4a05c19ee97fe2e956b6907d93fce71e09","ssdeep":"3072:h85XAvGlfCrOJbeGKaQiGZtkvJIZ39xRic:1POJeGKaritkhIl9Dic","tlshash":"32a312d482cae152c6fefcf06a6f0b0711244d8d33356a6b81f15f1958aa5ec0d3abd5","first_seen":"2023-05-21T06:58:03Z","last_seen":"2026-04-15T15:01:33.253975Z","times_seen":748,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":52,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/upgrade-preview.avif","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/upgrade-preview.avif HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OQERrt3cDxarnIKh; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\r\ndate: Wed, 15 Apr 2026 14:58:35 GMT\r\ncontent-type: image/avif\r\ncontent-length: 29370\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: d384864d83f6e589dd3823f83712273e\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-72ba\"\r\nage: 15\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":29370,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7d1021622fb76db9bb421b9bf8323dbf","sha1":"317e42d72e299e6a0c98040e27e9c17ad51ace44","sha256":"bb66d1e6544dfd993fd8df72e93e3779bace20b3333eeb6e921eafa3864dfcdf","sha512":"1156af0444a7b26845c5fdf5a14e9546154e830108175a2037d66a03aed052e6a9a9850ea9958f5b8b28adc883beb55e00689453358495afe136f6748b0a89e8","ssdeep":"768:CqX8A5EGDEr0nAeAk1iewL+pWCLqBTNGRkVt2LsYin:hX8A5E2Rv1GScrhGeVt2Lbin","tlshash":"50d2e1e9cb244182daaaddfc3baf57437151c336a05385b1247d01a0e6307a1dbafec8","first_seen":"2026-03-05T18:38:47.28799Z","last_seen":"2026-04-15T20:09:23.906351Z","times_seen":9,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/upgrade-preview.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/upgrade-preview.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/terminal/home-banner-keanu.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/terminal/home-banner-keanu.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=NVy22AuGzC0LWMKR; __ddg10_=1776265127; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=kXuGoi5RJLiCfcOR; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:58:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 49090\r\nlast-modified: Wed, 15 Apr 2026 14:03:35 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 2484871cb430928da35d28cfb4d14fc0\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab7-bfc2\"\r\nage: 14\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a2a4b40761cbc8ae21233f836d69e5c","sha1":"eb42b80ab99395a9cbe15680c5b36e41fc37a636","sha256":"f6c1935a20dfbf0a281d8ce059a41b656251752fa1b341bdcb48325cf1ab75ef","sha512":"049bd10d80172d32177c8078a4c803a4fd44e6850d11117e5018aab395ef7ccc4ce65c497afaaea3cf1d8007ac3fc019f02259d52d59d39948f7825d24aa0455","ssdeep":"768:iDKER1HDNuVYA3NiWnaGZt5dzBa+731Ppj4sDnxjS75AgGs3HvbyNHnZfLQHRN7F:S1RkCAoWnNZt5NBz7RDYGgv3PbyNHCxP","tlshash":"f02301369325b2782dc8ffa48d0e1a1eacc3c4d552ec3920c18de0b6969a158f556f6a","first_seen":"2026-04-14T11:17:10.786567Z","last_seen":"2026-04-15T15:01:33.267688Z","times_seen":5,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/svg/youtube.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /svg/youtube.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=kXuGoi5RJLiCfcOR; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=om0g1zqhkNjsamJq; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:58:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:35 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 3dd819c82200631da9b7266e44f4d3aa\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"69df9ab7-3a0\"\r\nage: 0\r\ncontent-length: 406\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":928,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"717df0837bda4a03d14e7cfd25fac38f","sha1":"52b698189e515239a4423cd41b69b23c230b8431","sha256":"7c8e3047f7a4875a8232e6cc8cedf2e1f4da21a3fdf73108affb97a4f953114c","sha512":"fbf649468fe6991e08ce49d7bb072413e5ac110c1870832bd7f15c52ee73e8df8819c460f97ee7fe23b31abb3489a37e3f5ff0c63e380c4011bf3aec6031e2bd","ssdeep":"","tlshash":"0d113afb93c89690e607c320c9742521b61714ff376ecb1a50286275a03e49b99dded9","first_seen":"2026-03-27T15:29:12.280904Z","last_seen":"2026-04-15T15:01:33.338386Z","times_seen":12,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":308,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/flags/fr.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/flags/fr.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=B5CIlE8jqFuddlrz; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YTqbPgwhvYXLNBVr; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg10_=1776265129; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\r\ndate: Wed, 15 Apr 2026 14:54:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 5d6239e14f8e815417cfeb89e3f388bf\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 211\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-18f\"\r\nage: 239\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":399,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e376c53bdac6837db509644daa698d1b","sha1":"64b8df7e1af42b992179223a69f082e2accf7f4f","sha256":"cbdf0b7f6580b34347ffc6e0ae8e705593b4f27d044d6eea866b946a3798484a","sha512":"75bb9b62a5f6729c41d6e4a4b710081c73eb2a0c9d1ac1a37c26350e461ff8a69de02accff7e5bf6e37640a3fe35b827e8451bbc5283cf1adcee8fcdb439d3ea","ssdeep":"","tlshash":"35e068f060fcc606c508431c126c30952ab190c792898288b4441368ff8c5e7ed636cd","first_seen":"2026-04-14T11:17:10.798597Z","last_seen":"2026-04-15T15:01:33.329291Z","times_seen":5,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KBTMVREMQ9\u0026cx=c\u0026gtm=4e64d1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:46.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"48:3F:33:2E:77:E0:B0:F1:29:0A:29:69:1F:18:A6:0E:5D:6C:A5:AF","sha256":"1A:9D:0D:16:33:AF:6B:83:72:92:E6:E3:0A:62:1B:43:47:AD:04:3D:13:48:89:58:5F:04:58:10:42:EC:A5:F8"}}},"request":{"raw":"GET /gtag/js?id=G-KBTMVREMQ9\u0026cx=c\u0026gtm=4e64d1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Wed, 15 Apr 2026 14:58:47 GMT\r\nexpires: Wed, 15 Apr 2026 14:58:47 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 181182\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":561998,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8896)","md5":"7f575a6fae0a89c470b7b0d7f960c22e","sha1":"8a6ac6b3ec9bf8c3e921a0328e817bc57c14a0da","sha256":"0f21a35fd0cb16215ee41139d5c5622049c4917424af7977e7309799f6eaded0","sha512":"b1ea14375aa715bafcde11abc1fa8f10d56e42e12cb3bf86760fdfbc9edd32330056ffa67f4c761a5c8d530ef9049de856bcbf0164b1dfa68fdd670ce15dd08b","ssdeep":"6144:Bq8EjcT6hjzg2PPvXozN8ZA5bv59Paz/s3L8YcKwvNyC4pdgXi:d6tzg2voR8eTA7vNywS","tlshash":"b9c4faceb3c674626396f479903f01cb697b25e2b49dc8aab1d9cce02e345464127f78","first_seen":"2026-04-15T14:59:17.729165Z","last_seen":"2026-04-15T15:01:33.318017Z","times_seen":3,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/flags/ru.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/flags/ru.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=B5CIlE8jqFuddlrz; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=m9AYRe2SKo8MzaZ5; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg10_=1776265129; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\r\ndate: Wed, 15 Apr 2026 14:54:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: b151463978dc62ebbe65351d590ddfbe\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 259\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-1db\"\r\nage: 238\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":475,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76ab8484bed41fc73eeac895686ba64e","sha1":"76b2be250f19ce668eec8e887ab30467fb08488c","sha256":"79f4edf5e61d92c3a91dfe7cbe0396fd6cc2b0f0619713c35a5e651adf0b0e9c","sha512":"50e01243b5faf85ca927ba8ea471621ee653f7b4cddede349463f722fb2bb944eb5a4980602565635e420164e8b31dcc54da53021c4485cfc28afb95fb0e5d4a","ssdeep":"","tlshash":"b0f097d91068463984238b088e6bf42130fba2f9a4420240a4c36ae7fc919c38c6eed4","first_seen":"2023-05-25T17:50:46Z","last_seen":"2026-04-15T15:01:33.352566Z","times_seen":63,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/jackrun-preview-sm.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/jackrun-preview-sm.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/cases-preview-sm.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/cases-preview-sm.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/svg/arrow-up.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /svg/arrow-up.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=kXuGoi5RJLiCfcOR; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=spGeh6DyClE7zevy; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:58:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:35 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: b282286b9b2c93f29ccff8789e4a6cee\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"69df9ab7-28b\"\r\nage: 0\r\ncontent-length: 340\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"307089c9f8731908963565b7e689b720","sha1":"1076f6ef0a7a4bb47ac2fa4b58f17b3cde9c57ac","sha256":"389fb8b7f9978f854f7428bfde6b442e6c2f50c6a148d3a740f81e3fee8921b4","sha512":"a47e48b0942af104cb05a6b5ff09a337e11bc2df41c5e260e8b8385b783b6dba54f28c19975bdeec74d7c78b94242656ffd6df1249ae063dbcd651726eb22d6f","ssdeep":"","tlshash":"ebf02df08be8c84096480d32ca38f4e024ec68b87acc9381a2c0f1e9c07a292cec4c80","first_seen":"2026-04-14T11:17:10.80504Z","last_seen":"2026-04-15T15:01:33.256193Z","times_seen":5,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":334,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/double-preview.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/double-preview.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/jackrun-preview.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/jackrun-preview.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/crash-preview-sm.avif","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/crash-preview-sm.avif HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=pFPmv9t4P0aCZdte; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\r\ndate: Wed, 15 Apr 2026 14:54:51 GMT\r\ncontent-type: image/avif\r\ncontent-length: 17381\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: ee80a59083f049bd91dd2da80a1d972c\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-43e5\"\r\nage: 239\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17381,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"652784d2dc4250e6daa63c3088ec08e4","sha1":"72715bc8a3ec56cf7f220bffd5e2c41d4cb85e68","sha256":"f88b7dac3df455bd327605b283afe9f309667eda7e6d5897279073885ff6adce","sha512":"5009e7f15728ef41c07a2e11f7bca2e391e75f93363cc80cc6927ca372f13bab9cabd5d17429cbe26b89d61346f96b4ff9ec6876ba7cf4e12375472dff04629e","ssdeep":"384:S2BQa+hith6vVZ+/DZznKbgcAd7vsDk7auFvAZ:LQaWitQ+/DZzn9cSvsD6k","tlshash":"e572e08eb6b16344c7384b74d7336bb0af74dda891521630b686c65ac8e7f83ec39544","first_seen":"2023-11-12T19:52:50Z","last_seen":"2026-04-15T15:01:33.339428Z","times_seen":9,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/promo-code-bg.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/promo-code-bg.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=kXuGoi5RJLiCfcOR; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ylmS1VEkynjznxHm; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:58:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15206\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 0834cdfc0879bbf1370861ed830e19e5\r\nddg-cache-status: MISS,HIT\r\netag: \"69df9ab6-3b66\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15206,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fab0aa556616f0a5e4eeec4c319ecec9","sha1":"eaaa0c4c4805a8104e0c109cb64999c61670f811","sha256":"1c29b76b95eeed0cb4d1c2d6ae304c4c5ba450c5d4daf072effd797b207c8f2d","sha512":"ee46b7611957051646ecd380f72e0876f59344a99ce0c0982403e24aee5aeabc9ea5ea7ea5f09dc21feeac6c0c0381507aa59f593603ff08e42eef72f7076564","ssdeep":"384:c2DWE3h9cwppW2/QiXUQ4z92pu0PZ0h9NP37d:cDVwS2IikMx0h3d","tlshash":"9e62d04ad1f77bb22cd9b03f59d7d7a8298b62d01fc4824e280604ce3e5777016abc94","first_seen":"2026-04-14T11:17:10.812643Z","last_seen":"2026-04-15T15:01:33.255084Z","times_seen":5,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/svg/big-win/big-win-wing-right.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /svg/big-win/big-win-wing-right.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=kXuGoi5RJLiCfcOR; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NKn4QCvEYAHd6Ilm; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:58:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:35 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: f6d4617dcfdbcc47fa080189fb0087a0\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"69df9ab7-58c\"\r\nage: 0\r\ncontent-length: 733\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1420,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f392fa8ac603014f6f6707f43f065545","sha1":"654d537d9c7437a82bb9cee56c5ea32a110f5d21","sha256":"4b6f86fc01ad6eaad229e88298bbbd0cc9ddca8a9f0a33af6b9e3106bb0b91ca","sha512":"582c0e2c1b2a8e8618042c935dc5d0edf115a92bcf0b467a7d29c7b7347e0c534b6993f6ccbdcdf81bab3b7caff99b4aff05f356aae3b305e8abb10e7e2c02ac","ssdeep":"","tlshash":"192122bb93dda3a0f402d7b0911365343def38f60d61c81847e02d65edc955c85998db","first_seen":"2026-04-14T11:17:10.806235Z","last_seen":"2026-04-15T15:01:33.294042Z","times_seen":5,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":108,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/svg/chat.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /svg/chat.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=DFoykeXbw7bb34GC; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=B7h8rBaXRAqtKdU1; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg10_=1776265129; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\r\ndate: Wed, 15 Apr 2026 14:58:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:35 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 0c06dbb0f4862467f404923bb168ca02\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"69df9ab7-1ec\"\r\nage: 0\r\ncontent-length: 234\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":492,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"16d118728c3708b8cc3eff8a2abe9f04","sha1":"14de985028a0f342b28079c985103633bf8e4a0a","sha256":"486dff23262249f5994d51f4baac5b6154edb9ebcb68c846ff38f268f882da9c","sha512":"57eeed5a4a7dc8db2e69188fe0dd7f36af6bbd921d7cbbc197e1fe97e58e72522aecd78080c180ab9f7aa7b778791055fc950b9fdaa7e46172d97870ea0c7471","ssdeep":"","tlshash":"c9f0e565d33444154be96a01cc3a3319bc46a28e394970c3be0fb5813f1f4b79576aee","first_seen":"2023-11-12T19:52:51Z","last_seen":"2026-04-15T15:01:33.359473Z","times_seen":8,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/upgrade-preview-sm.webp","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/upgrade-preview-sm.webp HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/games/crash-preview.avif","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:50.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/games/crash-preview.avif HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=hyfTVNMHULUyR2T2; __ddg10_=1776265129; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=KgGfXxqm8b7ImNNL; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg10_=1776265130; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:50 GMT\r\ndate: Wed, 15 Apr 2026 14:58:35 GMT\r\ncontent-type: image/avif\r\ncontent-length: 24836\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 6df0974d6f7eb69d71156debb58729d1\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-6104\"\r\nage: 15\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24836,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c874f70eef505166d8dba1673045f917","sha1":"88430333feb991dc10c766cbbefdea9a59ade1fa","sha256":"71d30021982c9aa8926c4e426292371d9b100a29dbea8782da9b01d140bec01c","sha512":"27aca94804b6a09e5e24b1cf31d700a27dba8c908d1854840752598a971ed9615a8f356164d470318be9dc17b682c48f05a332f347a6705bd0c66247cdf00287","ssdeep":"768:nbJolvrHxuy/kmMjYcCssJ0jNdrvshcsg7:dYTRugJMccCsY0jNdsg7","tlshash":"deb2e17a29da6d51f978d333d38007506aa523371105b8fb9a6c6c8e55808368f7bbc7","first_seen":"2025-03-05T20:54:24.995991Z","last_seen":"2026-04-15T20:09:23.905479Z","times_seen":18,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/flags/es.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/flags/es.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=B5CIlE8jqFuddlrz; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PMeI5gu6aeuKP16w; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg10_=1776265129; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\r\ndate: Wed, 15 Apr 2026 14:54:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 22d318fd298ad4aba7b4cc9f9b7f6794\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1621\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-173d\"\r\nage: 238\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5949,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a9d55358a34eb261cdf635904f34d3a0","sha1":"89b07053dca5cb29b495bcb63e240ab30138d8a6","sha256":"9d53912b4b14c5d9e3f8203bbcf0ca6262c47121a65d4f8363e76f71f4f54253","sha512":"4acfacca7a3d24d71e8eda7ee6bdd141e8f57486a3852e23c70ae940468262c5d4f40dfc777a79b10051ea7a6e02edbaa02f651ae751bcd5e6fee616553e7059","ssdeep":"96:kHvfAGOHVib6Djv4hUgIgBIB8EG8rPQ7oc/ogr2ee1RUwbIyV5:YNIgBIBBGY4kElr2Ce","tlshash":"bcc1848ec29f9cea92109f15db6c23f26131a39493b2459cd799dd1f3a0f221ac2c4dd","first_seen":"2023-05-14T22:37:02Z","last_seen":"2026-04-15T15:01:33.26287Z","times_seen":62,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/fonts/inter-regular-2.woff2","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /fonts/inter-regular-2.woff2 HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/assets/index-f4c6c4ff.css\r\nCookie: __ddg8_=B5CIlE8jqFuddlrz; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=T8mzHxZ04Y6Lj0zu; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg10_=1776265129; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\r\ndate: Wed, 15 Apr 2026 14:57:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 98756\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 40091ab44fdf411dcb1b5ca9602825bf\r\netag: \"69df9ab6-181c4\"\r\nage: 103\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 98756, version 1.0","md5":"a90c493e75dbd61aec1195dbb9bb6b06","sha1":"a3e3ae8b6f79820b0b393a92fc613f50fb9f03c6","sha256":"ed64c5d83f5fcc357eb8afd0a7b8d9912cae97d88dd57cccb64787bb643c7c76","sha512":"4c3bda6554b08f9378fca75fb24fc9334534f365de8ab28f83228d95871d5c25ca90ba3945c390dc41ed176f4258df86bd5db1849b7d5bc09f257d309cd66cde","ssdeep":"3072:3f52dl72hKiGTrJNGZvdfJVgBz+rbFoGR0F6M:vol7gKiGPc1u6M","tlshash":"28a30217d38fbf2cc371ba7a390b245d225e9280421df6195f48c94a161dead27f368b","first_seen":"2023-04-26T21:16:46Z","last_seen":"2026-04-15T15:01:33.295715Z","times_seen":1628,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/svg/games.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /svg/games.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=kXuGoi5RJLiCfcOR; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=SeYrBxl2C3OccCwU; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:58:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:35 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: b6df56dbdc021e81f069c98f8c111fe1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"69df9ab7-48d\"\r\nage: 0\r\ncontent-length: 538\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"88736e91d2102d9131b6ea6a587b1d6b","sha1":"86bd991eea4fb4053a8324635d656294a880856b","sha256":"ca0a5d60e273c4b2bbd7f9b90f4be85d5f009112db49018468209a1a3323b560","sha512":"1868c3f73e87f40262a31bc466ce21e43072b682e026b1e49ecf95c4b38a96c154e8424fe724d1d93e7f2ccc5f41783b33c17475dfefa29c26f324c061861652","ssdeep":"","tlshash":"74217651d3a6abb0ec412725ac70ac30319e189a24e1e3dcb7ffd6532e025e050a8da9","first_seen":"2023-11-12T19:52:50Z","last_seen":"2026-04-15T15:01:33.302898Z","times_seen":14,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/logo.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=WNA5lIlUasln7iXA; __ddg10_=1776265127; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=AgxtqTsz2Y1qtO9b; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:54:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: e7b3145484c18ef895540480572c5eee\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2464\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-1cc8\"\r\nage: 238\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":7368,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"465cd449d95b2fff0f5e93857fcc8132","sha1":"4d6a3141ac97dbc49afad312bf463160c108242a","sha256":"e5650798fbbc06892a698f6d40334e1145727809204b2625ab45a414b39858ec","sha512":"1155a780af62252b5bb963b2881764cc11bd14e0e768b1238dff27cc3e3cf72b859ac40e9d73e2fc9773182538cedaa0fd7f64bb91965df818e3553828b404b6","ssdeep":"96:cYP73sJi4WZ+3+9WlA9fKgsnjyDKV7HeVm9OVgL6qJt/xXBk2VbX9Rww9VdzAPco:ccKNcJiy+wm9egLVzA8h9fAPigF","tlshash":"cae18369c75c6d3ae212c3e8c620507b74a9a89ee544c3bcd5f79b1b75248f3487ca60","first_seen":"2023-11-12T19:52:50Z","last_seen":"2026-04-15T15:01:33.277226Z","times_seen":15,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KK3SD6T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:46.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"48:3F:33:2E:77:E0:B0:F1:29:0A:29:69:1F:18:A6:0E:5D:6C:A5:AF","sha256":"1A:9D:0D:16:33:AF:6B:83:72:92:E6:E3:0A:62:1B:43:47:AD:04:3D:13:48:89:58:5F:04:58:10:42:EC:A5:F8"}}},"request":{"raw":"GET /gtm.js?id=GTM-KK3SD6T HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 15 Apr 2026 14:58:46 GMT\r\nexpires: Wed, 15 Apr 2026 14:58:46 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 15 Apr 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 127032\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":379974,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9773)","md5":"2012d6bcc5467297608189f7c924b726","sha1":"622158b704bf7d86ab9882bad6b62fc31a68358c","sha256":"4976d6807631478f055268c8f747fe80c3c0f514a173f976070d60858846505e","sha512":"f1d1606a3805fca57421ada2a8cdbfe50b72dd12241cdd74877e0313ed897d655e1276820eedb0e897b82d184f2dfcebc414591e8478f8dfcf3e75acf6d2e8fa","ssdeep":"6144:x5i8EjcGhBAg2PPBN8ZA5Z59Paz/s3LQaWM:x8/Ag2r8eFnJ","tlshash":"378418cdb3da74664393a478903f018ba57a28e2f44cc899f185dcd42e706aa4277f7d","first_seen":"2026-04-15T14:59:17.744104Z","last_seen":"2026-04-15T15:01:33.351807Z","times_seen":3,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":93,"dns":10,"connect":7,"send":0,"wait":30,"receive":29,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/icons/favicon-16x16.png","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:47.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /icons/favicon-16x16.png HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=Mmyl1gXdFY8GJsF9; __ddg10_=1776265126; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NVy22AuGzC0LWMKR; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:47 GMT\n__ddg10_=1776265127; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:47 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:47 GMT\r\ndate: Wed, 15 Apr 2026 14:58:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1129\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 52ac528f2c38d3e80c2ac9cc66218587\r\netag: \"69df9ab6-469\"\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"ab7f9287a0d294b062824e9ce560eae4","sha1":"b52c5ef353e6446d4c938bbc9f0de6edae60ac11","sha256":"f91e017aaa72eeb336380ef1d16b8d7542137d0c4862e3eb0c524f900a6b7d01","sha512":"bc666e5e0b45cf52c9ce0f35c37f806dd4f7f5fede06d132c61cdfd5a90f71b6fc0fb6b343efe4513bdd2fe74d5bdce2f865d0bae090a029b64b05be75410fcd","ssdeep":"","tlshash":"452160a26f25ab16f4897c3b2352bb415bd1e25d1336328f969504d30f5e7c67e6c600","first_seen":"2023-05-14T22:37:00Z","last_seen":"2026-04-15T15:01:33.3319Z","times_seen":13,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/svg/crown.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /svg/crown.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=kXuGoi5RJLiCfcOR; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NRRz7hvljaJ1llmE; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:58:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:35 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 749a5e7c184564d4a4123a53e4b64253\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"69df9ab7-196\"\r\nage: 0\r\ncontent-length: 242\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":406,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"acde1c42245df9c5b4a10ec34e6571a8","sha1":"7f533b3a93e19626e06b30145689d913d3e5e257","sha256":"18cfc1042293552bb05f40452c6f5b20c8765ac19c98d98ede2d271da188d324","sha512":"3713fc5b157649d2d88f3ec36c519c8a3cc4356559c9d7309e3a02bfadbec14932d0618d0ce7a4bfab5ba2ca6e875df66520e5479f25192b875e5af671639f06","ssdeep":"","tlshash":"07e0abb1eb8e7535e04dcb068d79dc023585a0d231e740fda352d541009c8f0c640ab2","first_seen":"2026-04-14T11:17:10.793743Z","last_seen":"2026-04-15T15:01:33.269364Z","times_seen":5,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/svg/trophy.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:48.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /svg/trophy.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=kXuGoi5RJLiCfcOR; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=658yBfn6uMOHPObQ; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg10_=1776265128; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:48 GMT\r\ndate: Wed, 15 Apr 2026 14:58:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:35 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 5a24325a3e09c8fd98b5d59db1c6f269\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"69df9ab7-321\"\r\nage: 0\r\ncontent-length: 407\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":801,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c3711e812f78acdf791ad08cadd5ad4d","sha1":"9ea995ead1b1f92b35c525a7e1ec990ae866843c","sha256":"fde6f50e39f02875bf1e879db2b3d3578309dd35279d8dc64614313ebcdb7c1f","sha512":"43a1c11ffd0d9c2c5e589496ceb8e0aa9e240075f4ed906b3c1cabb8a4c21aa5e9cc70cc69aeeb4e57e11b2b157f516a3a5293aa2845e0bdd2679ab31e7e3442","ssdeep":"","tlshash":"4d01b154e21e8e6628fd8f0e44605c46b26e81e23058e1acffbf2bcb17359b047508de","first_seen":"2026-03-27T15:29:12.291369Z","last_seen":"2026-04-15T15:01:33.34085Z","times_seen":12,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgorun.live/img/flags/sv.svg","fqdn":"csgorun.live","domain":"csgorun.live","tld":"live"},"ip":{"addr":"91.215.40.46","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csgorun.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 08:23:30 GMT","end":"Mon, 08 Jun 2026 08:23:29 GMT"},"fingerprint":{"sha1":"68:A4:83:8D:CB:01:B6:32:94:A1:C6:A7:32:7E:41:97:57:A2:7B:D9","sha256":"A6:CE:35:46:58:7A:85:1E:71:1B:BB:E0:82:5A:F7:D4:BC:9C:FC:54:1E:72:27:C9:0D:3E:BC:A5:83:C1:74:88"}}},"request":{"raw":"GET /img/flags/sv.svg HTTP/1.1\r\nHost: csgorun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nCookie: __ddg8_=B5CIlE8jqFuddlrz; __ddg10_=1776265128; __ddg9_=91.90.42.154; __ddg1_=hE8j0o9QvvJXnCm9kVV5; _ga_KBTMVREMQ9=GS2.1.s1776265127$o1$g0$t1776265127$j60$l0$h0; _ga=GA1.1.661768945.1776265127\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=wJeGaSlRQTiBgFB9; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg10_=1776265129; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg9_=91.90.42.154; Domain=.csgorun.live; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\r\ndate: Wed, 15 Apr 2026 14:54:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 15 Apr 2026 14:03:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 175a3d1aacbfae95326195ee4f812195\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 236\r\nddg-cache-status: HIT,HIT\r\netag: \"69df9ab6-1ae\"\r\nage: 240\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":430,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dce4b10fca44faf5efdeb2b93c6a8dee","sha1":"8c72c643f8b9815abf5e195f79041e5f9d2e3558","sha256":"8b1d8af9b178906aa27088e3913e959532c447cb00b86ca398e7e2066e34d887","sha512":"11cf4828f086a021833d01007f342b76954543eaa047c9104fa39d026400071d5fac409f31d61aecab8f874684ba84d77aafc7ae1d915e6e70f073cc683bc395","ssdeep":"","tlshash":"a0e0ab21a0edc2069e88839d992c396a2972c1e2528d43957055336ebe5c5a71d23b8a","first_seen":"2026-04-14T11:17:10.781397Z","last_seen":"2026-04-15T15:01:33.354843Z","times_seen":5,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"csgorun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2run.app/homepage/state","fqdn":"cs2run.app","domain":"cs2run.app","tld":"app"},"ip":{"addr":"190.115.31.208","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://csgorun.live/","date":"2026-04-15T14:58:49.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2run.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 13:14:40 GMT","end":"Mon, 01 Jun 2026 13:14:39 GMT"},"fingerprint":{"sha1":"F7:A2:8E:EC:04:91:B0:14:56:71:AB:67:B6:9A:82:9E:8E:BD:95:75","sha256":"8B:90:95:BD:5B:C5:81:13:0C:0E:B1:09:66:F9:D4:FC:D0:4A:7D:17:C1:E2:DE:E7:6D:85:21:8C:18:AE:C1:FE"}}},"request":{"raw":"GET /homepage/state HTTP/1.1\r\nHost: cs2run.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://csgorun.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csgorun.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=eu2PCTSfPRrdr0vt; Domain=.cs2run.app; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg10_=1776265129; Domain=.cs2run.app; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg9_=91.90.42.154; Domain=.cs2run.app; Path=/; Expires=Wed, 15-Apr-2026 15:18:49 GMT\n__ddg1_=nY2SgQVmsoCxeoRx2MPB; Domain=.cs2run.app; HttpOnly; Path=/; Expires=Thu, 15-Apr-2027 14:58:49 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 15 Apr 2026 14:58:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://csgorun.live\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"4db-r2Pzd2Y/8IPQelQh0hBSR8KaZtQ\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 7d5d8f90e127e0930ed614437d397fbe\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1243,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ce08331b8892fed48de87c852d7351de","sha1":"af63f377663ff083d07a5421d2105247c29a66d4","sha256":"8a432fad899fe1e09dc77c73411552282bc86043fdfeb5b3aeca0d2389d76c0e","sha512":"4fa0f860e984d9ed5501fb62ef7a2b499c97f2837fafa33010dbb3ab786c98a34e058b63d03b19687b11c0c74cd257b1e3a2dcc97cc87026e5386e87c1a2d3e2","ssdeep":"","tlshash":"f92157a3e4df9b3b1f6caae53c8f654696e1a17f2550361b72b19a6410113d903030dc","first_seen":"2026-04-15T14:59:17.751401Z","last_seen":"2026-04-15T14:59:17.751401Z","times_seen":1,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":158,"dns":20,"connect":55,"send":0,"wait":114,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}